---
id: SCR-PFM-SEC-023
title: HQ home
route: /hq
surface: console
product_area: platform
module: security
revision: 1
status: draft
design_intent: proposed
implementation_evidence: observed
inference: []
source_sha:
  react-console: baf6dae382d6f41dce976c7f848667ccc37e076f
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
purpose: Give staff a home for private workspace shortcuts, recent jobs and permitted customer entry.
supports:
- JNY-PFM-SEC-001
- JNY-PFM-SEC-005
- CAP-PFM-SEC-002
- CAP-PFM-SEC-017
permission: staff membership (context.user.isStaff); cards and actions check their individual HQ keys
entry_from:
- Staff sign-in landing
exits_to:
- /hq/tenants/{id}
- /console/{tenantId}
displays:
- field: The staff member’s pins and recent-workspace history.
  source: listMyHqTenantShortcuts
  provenance: observed
- field: Recent job summaries when job-reading authority is available.
  source: HQ jobs (Operations)
  provenance: observed
actions:
- label: Pin or unpin
  operation_id: pinMyHqTenantShortcut / unpinMyHqTenantShortcut
  permission: hq.tenants.read
  confirm: false
  provenance: observed
  source: react-console:components/console/hq/hq-home.tsx
- label: Enter a workspace
  operation_id: recordMyHqTenantShortcutOpened
  permission: hq.tenants.read
  confirm: false
  provenance: observed
  source: react-console:components/console/hq/hq-home.tsx
- label: Open emergency access
  operation_id: openHqEmergencyAccess
  permission: hq.emergency-access.use
  confirm: true
  provenance: observed
  source: react-console:components/console/hq/hq-home.tsx
states:
- loading
- empty
- error
validation:
- BR-CAP-PFM-SEC-002-13
- BR-CAP-PFM-SEC-017-07
- BR-CAP-PFM-SEC-017-13
patterns:
- PinnedTenantsCard
- RecentTenantsCard
- RecentJobsCard
- TenantSearch
- EmergencyAccessDialog
component: components/console/hq/hq-home.tsx (HqHome)
evidence:
- 'react-console at baf6dae: components/console/hq/hq-home.tsx; the page route file; lib/security/api.ts, lib/hq/platform-ops.ts,
  lib/hq/platform.ts, lib/auth/*'
examined_at: '2026-10-23'
examiner: codex
controls: [TC-AVL-001, TC-AVL-005, TC-AZ-001, TC-AZ-002, TC-AZ-003, TC-AZ-004, TC-AZ-005, TC-AZ-006, TC-CRY-001, TC-CRY-002, TC-CRY-003, TC-CRY-004, TC-DAT-001, TC-DAT-002, TC-DAT-003, TC-DAT-004, TC-IAM-001, TC-IAM-002, TC-IAM-003, TC-IAM-004, TC-IAM-005, TC-LOG-001, TC-LOG-002, TC-LOG-003, TC-LOG-004, TC-LOG-005, TC-MON-001, TC-MON-002, TC-MON-003, TC-PI-001, TC-PI-003, TC-PI-005, TC-PRV-001, TC-PRV-002, TC-TEN-001, TC-TEN-002, TC-TEN-003, TC-TEN-004, TC-VEN-001, TC-VEN-002, TC-VEN-003]
---

# HQ home

## What the Screen Is For

Give staff a home for private workspace shortcuts, recent jobs and permitted customer entry.

## What It Shows and Lets People Do

Staff membership admits the home page. Shortcut and workspace actions require their workspace-reading keys, while recent-job data uses job-reading authority. The page does not display a separate own-grants card.

## States and Errors

Entry records the opened shortcut and attempts the permitted workspace destination. Refused entry can offer emergency access where authorized; its dialog remains a separate grant operation.

The state rows describe observed loading, empty, refusal or inactive handling where present. Linked validation rules belong to the planning layer; client feedback and authoritative service checks have distinct responsibilities.

## Patterns It Must Respect

The pattern list names the built shared components and interaction patterns checked for this screen. This contract describes the existing screen; it supplies no replacement visual design.