Why this demo exists
Invoice review is where security and usability collide: operators need full fidelity, reviewers need masked fields, and shared links need strict limits. This showcase maps to the react-admin invoice reviewer demo and highlights how to evolve it into a production-grade secure PDF app.What it proves
- Document pages can be rendered directly from URL builder paths.
- Structured invoice outputs can drive admin-style table/detail workflows.
- Role-based output policies can expose different views of the same source document.
Current demo status
The current runtime demo intentionally shows both what works and what is still mocked.| Capability | Current status |
|---|---|
| Session upload + PDF processing | Real |
Page image rendering via doc(...).pages[n].image.url() | Real |
| Role policy enforcement + redacted output delivery | Prototype direction |
Structured output URLs (o_) for invoice entities | In progress |
Production hardening checklist
- Move token-to-policy resolution fully server-side.
- Materialize invoice output profiles (
o_invoice) as cacheable artifacts. - Ensure redaction lens applies to page assets, structured JSON, and completion contexts.
- Add audit logs for policy, model, and output lineage.
Demo Source
runtime-demo/invoice-reviewer