当前页面已进入跨页知识网络层：不仅展示本页拓扑，还明确它在整站里的分类、被哪些页面引用、又继续指向哪些专题与证据页。
flowchart TD
subgraph Entry["本机入口"]
Flag["--enable-operator-console / MSG_ENABLE_OPERATOR_CONSOLE"] --> Listener["OperatorConsoleServer"]
Listener --> Bind["127.0.0.1 / ::1
API_PORT + 7000"]
Bind --> Pages["/operator/ + /operator/status.json"]
end
subgraph Surface["当前只读表面"]
Pages --> Overview["Overview / Roles / Network"]
Pages --> Resources["Resources / Mempool"]
Pages --> Rewards["Rewards
attoMSG / 18 decimals / unconfirmed fail-closed"]
Pages --> Security["Security / cache policy / peer redaction"]
end
subgraph Guard["本地安全护栏"]
Listener --> Loopback["non-loopback remote reject"]
Listener --> Host["non-localhost Host reject"]
Listener --> Proxy["Forwarded / X-Forwarded-* / X-Real-IP reject"]
Listener --> Method["GET only / write operations off"]
Listener --> CSP["nonce CSP / no-store / nosniff / XFO"]
Listener --> Path["dot-segment path traversal fail-closed"]
end
subgraph Boundary["剩余门禁"]
Rewards --> LiveData["contract-query economy live data"]
Security --> Browser["browser trace / LAN-public-tunnel negatives"]
Browser --> P1["完整 P1 仍需 XSS / CSRF / CORS / auth bypass / runbook / release package"]
end