Open and serve

premier open                              # latest traces dir, opens browser
premier open path/to/run.atrace           # focus one artifact
premier serve --trace-dir .premier/traces # no browser auto-open

Default bind: http://127.0.0.1:4317.

Team / non-loopback binds require authentication and native TLS:

premier serve --bind 0.0.0.0:4317 \
  --password "$PREMIER_PASSWORD" \
  --tls-cert ./fullchain.pem \
  --tls-key ./private-key.pem

Investigation modes

Mode Use for
Timeline Ordered evidence, filters, deep links to events
Actors Who was active, actor lanes, brand/provider identity
Architecture Inferred topology over a time window
Analytics Counts, health, model usage rollups

Integrity

Finalized traces carry digests. List and detail APIs expose integrity / integrity_detail so tampering is visible in the UI, not silent.

Live streams

In-progress recordings stream via SSE (trace.event, terminal trace.complete). The connection pill in the app bar mirrors live / recorded / disconnected state.

Keyboard & deep links

Deep links encode selected trace, event, view mode, and filters so investigations are shareable. Empty states use the same PATH commands as this docs site: premier demo, premier record, premier emit.

See Secure deployment for scoped bearer credentials and tenant isolation.