AX
AutoX
Command Centre
Lashibi Autos / Accra HQ
SessionAAL2 · Trusted
RBAC
Scope
SECURITY PROTOTYPE

This standalone HTML enforces the AutoX authorization policy in the UI and data simulator. It demonstrates the intended production behaviour. A real security boundary requires the same policy to be re-evaluated server-side and at the data-access layer on every protected request.

15 September 2026

Good evening, Ama.

Here is what is happening across Lashibi Autos today.

AutoX Command Centre

One business. One operating system.

Live control of workshop jobs, rentals, fleet, vehicle sales, inventory, customers, finance, insurance and every vehicle's digital history.

₵
+12.4%
₵184.6k
Revenue · September MTD
↔
82%
33 / 40
Rental vehicles active
🛠
+8 jobs
27
Open workshop jobs
◆
-2 MoM
6
Vehicles sold · MTD

Live operations

GT
Toyota Prado · GR 4481-25
Workshop · Brake service · Bay 04
In progress
BM
BMW X5 · GW 2920-24
Rental · Kotoka → East Legon · 4 days
On hire
RR
Range Rover Velar · LX-2026-018
Sales · Buyer awaiting payment verification
Reserved
MB
Mercedes GLE · GR 7702-25
Fleet · Insurance renewal due in 6 days
Action

Today at a glance

12:53 GMT
9Pickups / returns
14Workshop arrivals
₵41.8kPayments received
5Sales enquiries

Attention queue

3 urgent
!
Parts stockout risk5W-30 engine oil · 2 days cover
High
!
Late rental returnHyundai Tucson · 2h 14m overdue
Watch
!
Invoice awaiting GRA syncINV-260901-0041 · retry queued
Queued
Garage & Workshop

Workshop operations

Vehicle intake to diagnosis, approval, repair, QC, invoicing and delivery.

▣
+4 today
27
Open jobs
✓
92%
11
Completed today
⌛
3.8h
Average turnaround
₵
+9.1%
₵28.4k
Labour revenue today
Intake 5
JOB-260901-021
Toyota Camry · GT 819-24
AC not cooling · Diagnostic
Customer: Kojo Mensah
JOB-260901-024
Kia Sportage · GE 881-25
30,000 km service
Appointment · 13:30
Diagnosis / Approval 7
JOB-260901-017
Mercedes C300 · GR 940-23
Suspension noise
Estimate: ₵5,860 · Awaiting approval
JOB-260901-019
Ford Ranger · GW 504-24
Engine warning light
OBD scan completed
Repair 9
JOB-260901-014
Toyota Prado · GR 4481-25
Brake service · Bay 04
Technician: Emmanuel A.
JOB-260901-011
Nissan X-Trail · GE 117-22
Timing chain replacement
Parts issued 12:04
QC / Ready 6
JOB-260831-089
Hyundai Santa Fe · GX 55-24
Major service
QC road test pending
JOB-260901-006
BMW X3 · GT 288-25
Front pads & sensors
Invoice: ₵4,250
Rental Division

Rental operations control

Reservations, drivers, dispatch, live vehicle tracking, mileage, fuel, inspections, deposits, extensions, incidents and returns.

RBAC enforcedVisible fleet, drivers and telemetry are restricted to current role and scope.
↔
82.5%
33
Vehicles on hire
🚘
7
Available now
⌖
31 live
94%
Fleet telemetry online
◎
18 / 22
Drivers on duty
31 transmitting
2 offline telemetry
1 geofence alert
1 overdue return
0 SOS active
Airport East Legon Spintex Osu
BMW X5 · 48 km/h
Mercedes GLC · 0 km/h
Prado · 63 km/h
Elantra · offline 7m
Live rental tracking
● Green pulse = online
○ Static = stale/offline
Dashed area = configured geofence

Selected vehicle

Live · 12 sec
BMW X5 · GW 2920-2448,812 KM
48 km/hSpeed
62%Fuel
13.2 VBattery
27 minEngine on

Active trip

RA-260829-015
James OforiSelf-drive
Pickup: Lashibi Autos · 29 Aug 10:04
Current: East Legon · Boundary Rd
Return: Lashibi Autos · Today 16:00
Distance: 184.7 km this rental
Exact location, trip history and renter identity are permission controlled.
🚙
RA-260901-038 · Mercedes GLC
Adwoa Nyarko · Pickup 14:00 · Kotoka Airport
Confirmed
3 daysDriver: Kwame D.₵8,400
🚘
RA-260829-015 · BMW X5
James Ofori · Return 16:00 · Lashibi Autos
On hire
Self-drive184.7 km₵9,600
22
Registered drivers
18
On duty
4.7/5
Avg. customer rating
93
Avg. safety score
KD
Kwame Danso · DRV-0018+233 24 621 7782 · Licence C · Expires 18 Feb 2028Assigned: Mercedes GLC · RA-260901-038 · Airport pickup 14:00
96Safety
EA
Eric Akoto · DRV-0007+233 20 318 4052 · Licence C · Expires 05 Nov 2027Assigned: Toyota Prado · Tourist package · Shai Hills
91Safety
MN
Michael Nartey · DRV-0021+233 54 990 1820 · Licence B · Expires 12 Jan 2027Off duty · Last trip ended 11:32 · 128.4 km
84Safety

Driver detail includes

RBAC-controlled
✓ Identity & Ghana Card
✓ Driver licence / class / expiry
✓ Assigned vehicle / trip
✓ Shift & attendance
✓ Safety / speeding events
✓ Customer ratings
✓ Trip kilometres
✓ Fuel / expenses submitted
✓ Fines / incidents
✓ Commission / payroll inputs

Mileage ledger

Automatic + signed readings
BMW X5 · GW 2920-24RA-260829-015
Pickup48,627 KM
Current48,812 KM
Trip 184.7 kmAllowance 450 km265.3 km left
Mercedes GLC · GR 5302-25RA-260901-038
Dispatch31,542 KM
Driver handover pendingPhoto verified

Fuel control

Rental / driver accountability
⛽
BMW X5 · 62%Pickup 74% · estimated 11.8 L consumed
Normal
⛽
Prado · 39%Return requirement: ≥50% · projected charge ₵240
Watch

Mileage controls

per agreement
✓ Opening / closing odometer
✓ GPS-derived trip distance
✓ Daily / total kilometre allowance
✓ Excess mileage billing
✓ Fuel level at pickup / return
✓ Refuelling receipts
✓ Odometer discrepancy alert
✓ Maintenance trigger by kilometres

Dispatch queue

Today
14:00 · Mercedes GLC · RA-260901-038Ready
Customer: Adwoa Nyarko
Driver: Kwame Danso · DRV-0018
Pickup: Lashibi Autos → Kotoka Airport
Odometer: 31,542 km · Fuel: 88%
Pre-dispatch inspection: 34/34 passed
15:30 · Toyota Prado · RA-260901-041Inspection
Customer: Global Mining Ltd
Driver: Eric Akoto · DRV-0007
Pickup: East Legon → Shai Hills
Documents: Corporate PO attached
Pending: tyre pressure re-check

Return inspection · BMW X5

Due 16:00
Opening mileage48,627 km
Current mileage48,812 km
Opening fuel74%
Current fuel62%
Deposit held₵5,000
Traffic / toll flags1 pending check

Inspection

before ↔ after
✓ Body panels
✓ Wheels / tyres
✓ Glass / mirrors
✓ Cabin
✓ Accessories
✓ Warning lights

Rental exceptions

Live
!
Hyundai Tucson overdue2h 14m · renter contacted twice · no extension approved
Escalate
◉
Possible new bumper markPrado RA-260831-029 · visual comparison requires confirmation
Review
₵
Fuel reconciliation2 expected return top-ups · estimated ₵470
Pending

Rental policy & control framework

administrative permissions required
KM
Mileage rulesDaily allowance, excess-km rate, kilometre exceptions and waivers
›
₵
Deposit & refund rulesVehicle-class deposits, deductions, approval thresholds and refund SLA
›
⌖
Tracking & privacyRole-based live location, playback retention, geofences and privacy masking
›
DRV
Driver assignment rulesLicence class, availability, fatigue, trip type, rating and vehicle eligibility
›
!
Incident & emergency escalationSOS, crash, immobilisation, police, insurer and management chain
›
Fleet Control

Fleet management

Utilisation, maintenance, documents, incidents, fuel, mileage and lifecycle cost.

▦
46
Total managed vehicles
↔
82.5%
38
In service / active
🛠
5
Maintenance due
!
3 due
8
Document renewals

Fleet register

46 vehicles
🚙
Toyota Prado VX
GR 4481-25 · 48,220 km · Rental
Active
Service in 1,780 kmInsurance 28d82% util.
🚘
Mercedes-Benz GLE
GR 7702-25 · 31,540 km · Rental
Action
Service in 460 kmInsurance 6d74% util.
🚗
Hyundai Elantra
GT 3390-25 · 22,018 km · Rental
Active
Service in 5,982 kmInsurance 112d91% util.

Fleet health

Live
86%
31Healthy
9Attention
6Critical / offline
₵0.82/kmAvg maint. cost
Vehicle Sales

Sales & dealership

Stock acquisition, preparation, leads, test drives, quotations, payments and handover.

◆
18
Vehicles in stock
◎
+11%
34
Active buyer leads
✓
6
Sold this month
₵
+8.4%
₵1.48m
Sales pipeline value
For sale
🚙
2024 Range Rover Velar₵895,000
18,220 kmPetrolAutomaticVerified
Reserved
🚘
2023 Mercedes GLC 300₵760,000
25,440 kmPetrolAutomatic1 owner
Ready
🚗
2025 Toyota Corolla₵385,000
8,100 kmPetrolAutomaticWarranty
Parts & Inventory

Inventory control

Parts, consumables, suppliers, purchasing, stock movement and job consumption.

▤
1,284
Stock items
₵
₵426k
Stock value
!
12 items
18
Below reorder level
↗
+6%
4.7×
Inventory turnover
Part / SKUCompatibilityOn handReorderCostSellStatus
5W-30 Full Synthetic
OIL-5W30-4L		Multi-brand612₵420₵560Low
Toyota Front Brake Pads
BRK-TYT-04465		Prado / Hilux / Fortuner248₵680₵920Healthy
Mercedes Oil Filter
FLT-MB-A270		C / E / GLC910₵145₵220Reorder
AGM Battery 80Ah
BAT-AGM-80		BMW / Mercedes / Audi114₵1,650₵2,150Healthy
Customers & CRM

Customer 360°

One customer identity across rentals, workshop, purchases, communications and payments.

◎
4,782
Customer records
↻
68%
1,106
Repeat customers YTD
★
4.8/5
Customer rating
◌
37
Follow-ups due
KM
Kojo Mensah
+233 24 555 0192 · 3 vehicles · Customer since 2023
VIP
Workshop 14Rentals 3LTV ₵68.4k
AN
Adwoa Nyarko
+233 20 991 8044 · Rental customer · 6 bookings
Active
Rental 6No incidentsLTV ₵31.2k
JO
James Ofori
+233 54 771 2001 · Sales + rentals
Follow-up
Lead: GLCRental 2LTV ₵19.8k
Finance & Payments

Financial control

Revenue, invoicing, Mobile Money, card, bank, cash, expenses, receivables and tax sync.

₵
+12.4%
₵184.6k
Revenue · MTD
↙
₵41.8k
Collected today
⌛
14 invoices
₵72.5k
Receivables
✓
96.8%
GRA e-invoice sync

Revenue trend

Last 7 days
Wed
Thu
Fri
Sat
Sun
Mon
Tue

Revenue by business line

MTD
↔
Rentals33.6% of revenue
₵62.1k
🛠
Workshop31.9% of revenue
₵58.9k
◆
Vehicle Sales26.4% realised gross margin
₵48.7k
▤
Parts & Other8.1% of revenue
₵14.9k

Recent payments

All channels
MTN
₵9,600 · Rental RA-260829-015
Mobile Money · 12:41 · James Ofori
Paid
GRA
₵4,250 · Workshop INV-260901-0041
Card · 12:17 · GRA sync queued
Syncing
Insurance & Claims

Insurance operations

Policy register, expiries, accident reporting, assessors, quotations, repairs and settlement.

◈
46
Insured fleet vehicles
!
8 due
8
Renewals in 30 days
⌁
4
Open claims
₵
₵118k
Claims value pending

Open claims pipeline

4 claims
CLM-260826-004 · Toyota Prado

Repair completed · Settlement request submitted · ₵34,800

CLM-260829-006 · BMW X3

Assessor approved estimate · Parts procurement in progress · ₵27,450

CLM-260831-007 · Hyundai Tucson

Assessment scheduled today at 15:30 · ₵18,900 preliminary

CLM-260901-008 · Mercedes GLC

FNOL received · Police report and incident photos attached

Digital Vehicle Passport

Vehicle history & trust

A longitudinal, permissioned record for every vehicle across ownership, use, service, repairs and inspections.

Verified AutoX Vehicle Passport

2020 Mercedes-Benz GLC 300 4MATIC

VIN · WDC0G8EB9LF654221
91
Vehicle Health & Trust Score
High-confidence history · 28 verified records

Verified timeline

28 records
01 Sep 2026 · 62,410 km

Multi-point inspection · Lashibi Autos · 31/34 checks passed

12 Jul 2026 · 58,204 km

Scheduled service · Oil, filters and front brake pads replaced · ₵4,840

04 Feb 2026 · 51,112 km

Rental return inspection · No new damage · Mileage verified

19 Oct 2025 · 46,080 km

Minor collision repair · Left front fender · Insurance claim verified

17 Mar 2024 · 22,420 km

Acquired by Lashibi Autos · Import documentation verified

Passport intelligence

Permissioned
✓
Mileage consistencyNo rollback indicators detected
Verified
◈
Accident history1 minor claim · structurally non-critical
1 record
🛠
Service adherence96% scheduled maintenance compliance
Strong
⌁
Document integrityVIN and registration cross-check passed
Verified
AutoX Intelligence

AI & decision intelligence

Operational copilot, diagnostics support, OCR, forecasting, anomaly detection and management intelligence.

AutoX AI

What do you need to know?

Ask across workshop, rentals, fleet, sales, customers, inventory and finance. Sensitive actions remain permission-controlled.

AI capabilities

Prototype
▣

Document & VIN OCR

Extract registration, Ghana Card, licence, insurance and vehicle data into structured records.

◉

Visual inspection AI

Compare intake and return images, surface potential new damage and assist inspection workflows.

◌

Voice-to-job

Convert customer complaints and mechanic voice notes into structured job-card information.

Customer Experience

Customer portal preview

Public booking, sales, workshop approvals, payments and vehicle history in one mobile-first experience.

Accra · Ghana
Premium mobility in Accra

Your journey
starts here.

Manage your Lashibi journey

Track an active rental, approve a workshop estimate, pay securely, view your invoices or access your vehicle's service history.

POLICY & UX ENFORCEMENT

Role switching is a deliberate demonstration control. Production identities, entitlements and scopes are issued by trusted authentication and authorization services and cannot be changed by the browser.

Identity · Authorization · Assurance

Security & Access Centre

Zero-trust identity, RBAC/ABAC, scoped data access, MFA, PAM, segregation of duties, audit, detection, cryptography and API assurance.

ID
Verified
1
Current authenticated principal
MFA
AAL2
12
Session risk score · Low
4E
3
Open four-eyes approvals
LOG
0
Security decisions this session

Authenticated principal

RESTRICTED

Session assurance

continuous evaluation

Authentication baseline

risk-adaptive
✓ Unique named identities
✓ MFA for privileged / sensitive roles
✓ Phishing-resistant factor preferred
✓ Device and risk context binding
✓ Short-lived access credentials
✓ Revocation / step-up on risk
✓ Idle and absolute session limits
✓ Protected recovery / factor reset

Authorization decision model

FAIL CLOSED
Decision = Principal(identity, role, assurance) + Permission(action) + Resource(owner, branch, classification, assignment) + Scope(organisation, branch, self) + Conditions(device, time, risk, delegation) + SoD + PolicyVersion

Effective permission matrix

Current principal
Domain
Read
Create
Update
Sensitive

Enforcement layers

same policy semantics
UI
Navigation & action capabilityHide or lock unavailable functions and prevent action execution.
ACTIVE
OBJ
Object / row scopeOrganisation, branch, assignment, ownership and self constraints.
ACTIVE
FLD
Property / field authorizationPII, finance, telemetry and security fields are allowlisted or redacted.
ACTIVE
API
Server / API re-evaluationRequired production boundary, simulated here and specified as mandatory.
PROTOTYPE
DB
Data-access / RLS enforcementRequired defence-in-depth boundary beneath application authorization.
PROTOTYPE
Sensitive operations follow maker-checker rules. A requester cannot approve their own material request. Approval does not bypass object scope, field restrictions or MFA requirements.

Approval queue

four-eyes / segregation of duties
Privileged access is exceptional.

Daily-use identities remain separate from privileged administrative identities. JIT elevation is time-bounded. Break-glass requires a documented reason, narrow scope, enhanced logging and retrospective review.

Just-in-time elevation

PAM

Request a temporary entitlement without permanently expanding the baseline role.

Emergency break-glass

CRITICAL

For defined emergency administration only. Every use is explicitly attributable and reviewable.

Privileged safeguards

production baseline
✓ Separate privileged identity
✓ Phishing-resistant MFA
✓ JIT / time-limited elevation
✓ Session logging / recording
✓ Root / DB / KMS secrets isolated
✓ Entitlement recertification

Authorization decision evidence

APPEND-ONLY

Detection use cases

simulated signals
!
Impossible scope requestCross-branch object request from dispatcher role
Blocked
MFA
Factor reset + privileged loginStep-up / identity verification policy armed
Detect
API
Webhook replayTimestamp / nonce / signature verification
Blocked
DB
Cross-scope object enumerationApplication + data policy negative test
Blocked

Cryptography & secrets

CONTROLLED
TLS
Transport encryptionModern TLS · managed certificates · obsolete protocols prohibited
PASS
DB
Data at restDatabase/storage encryption plus encrypted connections
PASS
KMS
Key managementVersioned keys · rotation · SoD · protected administration
PASS
SEC
Secrets managementNo client secrets · workload identity · rotation evidence
PASS

API, webhook & data controls

RESTRICTED
API
Partner APIScoped client · quota · expiry · anomaly detection
PASS
SIG
Webhook authenticitySignature, timestamp, nonce and replay rejection
PASS
RLS
Data isolationTenant/branch/assignment predicates + object authorization
SPECIFIED
PII
Privacy minimisationPurpose limitation, masking, retention and export constraints
ACTIVE
Administration

System & enterprise controls

Organisation, users, roles, branches, integrations, workflows, security, localisation and audit.

Effective RBAC matrix

Current session
Domain
Read
Create
Update
Sensitive
This matrix is generated from the same permission policy used to hide modules, redact fields and deny actions elsewhere in the prototype.

Platform

AutoX · www.autox.com
AX
AutoX Automotive Enterprise OSMulti-domain automotive operations platform · tenant: Lashibi Autos
Active

Enterprise

Lashibi Autos · Ghana
▦
Branches & operating locationsAccra HQ · Airport pickup · custom delivery zones
›
◎
Users, roles & permissionsRBAC, scoped access, approvals and segregation of duties
›
⌁
Workflow & approval rulesDiscounts, refunds, estimates, stock, sales and write-offs
›
GH
Ghana Country PackGHS, GRA invoicing, Ghana Card, MoMo and local formats
›

Integrations

Connected services
₵
Payments & Mobile MoneyProvider-agnostic payment orchestration
GRA
GRA electronic invoicingInvoice validation, retry queue and audit log
WA
WhatsApp & SMSBooking, estimate, status and service reminders
API
API & webhooksInsurers, fleets, suppliers, partners and future ecosystem

Security & assurance

Enterprise controls
◈
Audit trailImmutable event log for high-value business actions
✓
MFA for privileged usersRequired for finance, administration and approvals
⌛
Offline sync controlQueued workshop inspection and field-operation changes

All AutoX modules

✓
Done