States — contract, not decoration

Every state the staff console must render, for RED Playwright specs.

c1 · loading

Resolving your staff scope…

aria-busy="true" while the ReBAC-scoped org tree is evaluated.

c2 · empty (real)

🛰️

No customer orgs yet

On a fresh platform the only reachable org is root itself. Empty is real — the explorer shows root and nothing below it.

c3 · error + retry

⚠️

Couldn't load the org tree

A non-2xx while evaluating scope. Show retry; never fall back to an unscoped list.

c4 · fail-closed · 403 in place

⛔

You are not platform staff

The staff console requires the Employee role (ReBAC org-admin-on-root). A non-Employee reaching /staff gets 403 FORBIDDEN rendered in place with zero cross-org data — never a sign-in redirect; only a 401 re-authenticates.