From 0281810316371de143ff0c90b727990896994f24 Mon Sep 17 00:00:00 2001
From: DeepZone <mail@noisens.de>
Date: Wed, 20 May 2026 16:40:56 +0100
Subject: [PATCH] Add system status operational checks for v0.5.2-beta

---
 README.md                          | 27 ++++++++-
 RELEASE_NOTES.md                   | 23 +++++++
 backend/app/api/routes_health.py   |  5 +-
 backend/app/api/routes_system.py   |  9 ++-
 backend/app/core/system_status.py  | 96 ++++++++++++++++++++++++++++++
 backend/app/main.py                |  2 +-
 backend/pyproject.toml             |  2 +-
 backend/tests/test_api_smoke.py    | 21 +++++++
 docs/operations/system-status.md   | 29 +++++++++
 frontend/package-lock.json         |  4 +-
 frontend/package.json              |  2 +-
 frontend/src/App.tsx               | 60 ++++++++++---------
 frontend/src/api.ts                |  4 +-
 frontend/src/components/Layout.tsx |  5 +-
 frontend/src/types.ts              | 40 ++++++-------
 15 files changed, 266 insertions(+), 63 deletions(-)
 create mode 100644 backend/app/core/system_status.py
 create mode 100644 docs/operations/system-status.md

diff --git a/README.md b/README.md
index 67e54aa..d99062f 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,7 @@
 
 RouteForge is a read-only routing preflight and explainability tool for BGP, RPKI, Registry/IRR and Routing Visibility checks.
 
-Current user-facing version: **v0.5.0-beta**.
+Current user-facing version: **v0.5.2-beta**.
 
 <!-- Screenshot gallery placeholder:
 - docs/screenshots/dashboard.png
@@ -32,7 +32,7 @@ Routing changes often require fast but traceable checks across multiple external
 
 ## Current Alpha Status
 
-RouteForge is a **functional alpha** release with production-like workflows for read-only validation and demo usage. Current release target: **v0.5.0-beta**.
+RouteForge is a **functional alpha** release with production-like workflows for read-only validation and demo usage. Current release target: **v0.5.2-beta**.
 
 ## Quickstart with Docker Compose
 
@@ -51,6 +51,29 @@ URLs:
 - System Info (via frontend proxy): http://localhost:3000/api/system/info
 - Direct System Info (backend): http://localhost:8000/api/system/info
 
+
+## System Status
+
+RouteForge exposes runtime operational checks via `GET /api/system/status` and a **System** page in the GUI.
+
+Visible information includes:
+- Version
+- Mode (live/demo)
+- Read-only safety state
+- Database status
+- RIPEstat runtime settings
+- Enabled core features
+
+```bash
+curl http://localhost:3000/api/system/status
+```
+
+or directly against backend:
+
+```bash
+curl http://localhost:8000/api/system/status
+```
+
 ## Demo Mode
 
 Set `ROUTEFORGE_DEMO_MODE=true` to use fixed demo data.
diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md
index 520f990..021a18f 100644
--- a/RELEASE_NOTES.md
+++ b/RELEASE_NOTES.md
@@ -1,5 +1,28 @@
 # Release Notes
 
+## v0.5.2-beta
+
+**System Status & Operational Checks**
+
+### Highlights
+
+- New `/api/system/status` endpoint
+- GUI System Status view
+- Database health visibility
+- RIPEstat runtime settings visibility
+- Read-only safety state shown
+- API proxy status visible from frontend
+- Improved selfhosting observability
+
+### Known limitations
+
+- No authentication yet
+- No multi-user support yet
+- No advanced alerting
+- No scheduled health checks yet
+
+---
+
 ## v0.5.0-beta
 
 **Production Selfhosting Foundation**
diff --git a/backend/app/api/routes_health.py b/backend/app/api/routes_health.py
index 98a2f11..727039f 100644
--- a/backend/app/api/routes_health.py
+++ b/backend/app/api/routes_health.py
@@ -1,8 +1,11 @@
 from fastapi import APIRouter
 
+from app.core.system_status import get_database_status
+from app.database import engine
+
 router = APIRouter()
 
 
 @router.get('/health')
 def health() -> dict:
-    return {"status": "ok", "version": "v0.5.0-beta"}
+    return {"status": "ok", "version": "v0.5.2-beta", "database": get_database_status(engine).get("status", "unknown")}
diff --git a/backend/app/api/routes_system.py b/backend/app/api/routes_system.py
index 46cc9bd..bfdfda9 100644
--- a/backend/app/api/routes_system.py
+++ b/backend/app/api/routes_system.py
@@ -1,6 +1,8 @@
 from fastapi import APIRouter
 
 from app.config import settings
+from app.core.system_status import build_system_status
+from app.database import engine
 
 router = APIRouter(prefix='/api/system', tags=['system'])
 
@@ -9,8 +11,13 @@
 def system_info():
     return {
         'name': 'RouteForge',
-        'version': 'v0.5.0-beta',
+        'version': 'v0.5.2-beta',
         'demo_mode': settings.demo_mode,
         'read_only': True,
         'data_sources': ['RIPEstat', 'RIPEstat Whois/Registry'],
     }
+
+
+@router.get('/status')
+def system_status():
+    return build_system_status(engine)
diff --git a/backend/app/core/system_status.py b/backend/app/core/system_status.py
new file mode 100644
index 0000000..cae3a08
--- /dev/null
+++ b/backend/app/core/system_status.py
@@ -0,0 +1,96 @@
+from __future__ import annotations
+
+from urllib.parse import urlsplit, urlunsplit
+
+from sqlalchemy import text
+from sqlalchemy.engine import Engine
+
+from app.config import settings
+
+
+def safe_database_url(database_url: str) -> str:
+    if not database_url:
+        return "unknown"
+    try:
+        parsed = urlsplit(database_url)
+        if parsed.scheme.startswith("sqlite"):
+            return database_url
+        if not parsed.scheme or not parsed.netloc:
+            return "configured"
+
+        host = parsed.hostname or ""
+        port = f":{parsed.port}" if parsed.port else ""
+        user = parsed.username or ""
+        auth = f"{user}@" if user else ""
+        netloc = f"{auth}{host}{port}"
+        scheme = parsed.scheme.split("+", 1)[0]
+        return urlunsplit((scheme, netloc, parsed.path, parsed.query, parsed.fragment))
+    except Exception:
+        return "configured"
+
+
+def database_type_from_url(database_url: str) -> str:
+    if not database_url:
+        return "unknown"
+    scheme = (urlsplit(database_url).scheme or "unknown").split("+", 1)[0]
+    return scheme or "unknown"
+
+
+def _safe_error_message(exc: Exception) -> str:
+    message = str(exc)
+    db_url = settings.database_url
+    sanitized = safe_database_url(db_url)
+    if db_url:
+        message = message.replace(db_url, "[database-url]")
+    if sanitized and sanitized != db_url:
+        message = message.replace(sanitized, "[database-url]")
+    return message[:300]
+
+
+def get_database_status(engine: Engine | None) -> dict:
+    db_url = settings.database_url
+    payload = {
+        "status": "unknown",
+        "type": database_type_from_url(db_url),
+        "url_safe": safe_database_url(db_url),
+    }
+    if engine is None:
+        return payload
+    try:
+        with engine.connect() as connection:
+            connection.execute(text("SELECT 1"))
+        payload["status"] = "ok"
+    except Exception as exc:
+        payload["status"] = "error"
+        payload["error_message"] = _safe_error_message(exc)
+    return payload
+
+
+def build_system_status(engine: Engine | None) -> dict:
+    return {
+        "status": "ok",
+        "name": settings.app_name,
+        "version": "v0.5.2-beta",
+        "read_only": True,
+        "mode": "demo" if settings.demo_mode else "live",
+        "demo_mode": settings.demo_mode,
+        "database": get_database_status(engine),
+        "api_proxy": {"status": "ok", "mode": "same-origin", "frontend_proxy_expected": True},
+        "ripestat": {
+            "cache_ttl_seconds": settings.cache_ttl_seconds,
+            "timeout_seconds": settings.ripestat_timeout_seconds,
+            "max_retries": settings.ripestat_max_retries,
+            "retry_backoff_seconds": settings.ripestat_retry_backoff_seconds,
+            "use_stale_cache_on_error": settings.ripestat_use_stale_cache_on_error,
+        },
+        "features": {
+            "asn_check": True,
+            "prefix_check": True,
+            "preflight": True,
+            "reports": True,
+            "exports": True,
+            "data_source_diagnostics": True,
+            "cache_freshness": True,
+            "retry_resilience": True,
+        },
+    }
diff --git a/backend/app/main.py b/backend/app/main.py
index 8503def..aca05a4 100644
--- a/backend/app/main.py
+++ b/backend/app/main.py
@@ -8,7 +8,7 @@
 from app.config import settings
 from app.database import Base, engine
 
-app = FastAPI(title="RouteForge", version="0.5.0")
+app = FastAPI(title="RouteForge", version="0.5.2")
 
 app.add_middleware(
     CORSMiddleware,
diff --git a/backend/pyproject.toml b/backend/pyproject.toml
index a0f1c1e..2b977a7 100644
--- a/backend/pyproject.toml
+++ b/backend/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "routeforge-backend"
-version = "0.5.0"
+version = "0.5.2"
 description = "RouteForge backend"
 requires-python = ">=3.12"
 dependencies = [
diff --git a/backend/tests/test_api_smoke.py b/backend/tests/test_api_smoke.py
index b0a1744..e45df52 100644
--- a/backend/tests/test_api_smoke.py
+++ b/backend/tests/test_api_smoke.py
@@ -1,3 +1,6 @@
+import app.config as config
+from app.core.system_status import safe_database_url
+
 import importlib
 
 from fastapi.testclient import TestClient
@@ -147,3 +150,21 @@ def test_report_export_not_found() -> None:
         response = client.get(f'/api/reports/999999/{endpoint}')
         assert response.status_code == 404
         assert response.json().get('detail') == 'Report not found'
+
+
+def test_system_status_endpoint() -> None:
+    client = _client()
+    response = client.get('/api/system/status')
+    assert response.status_code == 200
+    payload = response.json()
+    assert payload.get('version') == 'v0.5.2-beta'
+    assert payload.get('read_only') is True
+    assert payload.get('database', {}).get('status')
+    assert payload.get('ripestat', {}).get('cache_ttl_seconds') is not None
+    assert payload.get('features', {}).get('preflight') is True
+
+
+def test_safe_database_url() -> None:
+    assert safe_database_url('postgresql+psycopg://routeforge:secret@postgres:5432/routeforge') == 'postgresql://routeforge@postgres:5432/routeforge'
+    assert safe_database_url('sqlite:////app/data/routeforge.db') == 'sqlite:////app/data/routeforge.db'
+    assert safe_database_url('not a url') == 'configured'
diff --git a/docs/operations/system-status.md b/docs/operations/system-status.md
new file mode 100644
index 0000000..c4e0c40
--- /dev/null
+++ b/docs/operations/system-status.md
@@ -0,0 +1,29 @@
+# System Status
+
+RouteForge provides operational visibility through the **System** page in the UI and the endpoint `GET /api/system/status`.
+
+## Endpoints
+
+- `GET /api/system/status`: detailed runtime/operational status.
+- `GET /health`: lightweight liveness status (compatible baseline endpoint).
+
+## What to check
+
+### If `database=status:error`
+- Verify `DATABASE_URL` in `.env`.
+- Verify database container/service availability.
+- Verify network routing between backend and database.
+- Verify credentials and database existence.
+
+### If API Proxy shows `ERROR` in UI
+- Verify frontend nginx is running.
+- Verify `/api` proxy config in frontend nginx.
+- Verify backend service is reachable from frontend container.
+- Verify browser calls use same-origin `/api/...`.
+
+### Demo Mode
+- Check `demo_mode` field in `/api/system/status`.
+- Check `ROUTEFORGE_DEMO_MODE` runtime value.
+
+### Version
+- Validate expected deployed version in `/api/system/status` and `/health`.
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 5dbfd23..b8aaa75 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "routeforge-frontend",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "routeforge-frontend",
-      "version": "0.5.0",
+      "version": "0.5.2",
       "dependencies": {
         "react": "^18.3.1",
         "react-dom": "^18.3.1"
diff --git a/frontend/package.json b/frontend/package.json
index 891aa4c..a9a6d46 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "routeforge-frontend",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/frontend/src/App.tsx b/frontend/src/App.tsx
index 794f4ae..46f4007 100644
--- a/frontend/src/App.tsx
+++ b/frontend/src/App.tsx
@@ -1,50 +1,52 @@
 import { useEffect, useMemo, useState } from 'react'
-import { getReportHtml, getReportMarkdown, getReportSummary, getReports, getSystemInfo } from './api'
+import { getReportHtml, getReportMarkdown, getReportSummary, getReports, getSystemInfo, getSystemStatus } from './api'
 import { AsnCheckForm } from './components/AsnCheckForm'
 import { Layout } from './components/Layout'
 import { PrefixCheckForm } from './components/PrefixCheckForm'
 import { PreflightCheckForm } from './components/PreflightCheckForm'
 import { StatusBadge } from './components/StatusBadge'
-import type { ReportListItem, SystemInfo } from './types'
+import type { ReportListItem, SystemInfo, SystemStatus } from './types'
 
-type NavKey = 'dashboard' | 'asn' | 'prefix' | 'preflight' | 'reports' | 'about'
+type NavKey = 'dashboard' | 'asn' | 'prefix' | 'preflight' | 'reports' | 'system' | 'about'
 
 export default function App() {
   const [active, setActive] = useState<NavKey>('dashboard')
   const [reports, setReports] = useState<ReportListItem[]>([])
-  const [copyMessage, setCopyMessage] = useState('')
   const [system, setSystem] = useState<SystemInfo | null>(null)
-  useEffect(() => { getReports().then(setReports).catch(() => setReports([])); getSystemInfo().then(setSystem).catch(() => null) }, [])
-  const systemLine = useMemo(() => system ? `${system.name} ${system.version} · mode=${system.demo_mode ? 'DEMO' : 'LIVE'} · read_only=${String(system.read_only)}` : 'RouteForge v0.5.0-beta · read-only preflight checks', [system])
-  const title = { dashboard: 'Dashboard', asn: 'ASN Check', prefix: 'Prefix Check', preflight: 'Preflight Check', reports: 'Reports', about: 'About RouteForge' }[active]
-  const notify = (message: string) => {
-    setCopyMessage(message)
-    window.setTimeout(() => setCopyMessage(''), 2000)
-  }
-  const copyText = async (text: string, success: string) => {
-    if (!navigator.clipboard?.writeText) return notify('Copy failed')
-    try { await navigator.clipboard.writeText(text); notify(success) } catch { notify('Copy failed') }
-  }
-  const downloadText = (filename: string, text: string, mimeType: string) => {
-    const blob = new Blob([text], { type: mimeType })
-    const url = URL.createObjectURL(blob)
-    const link = document.createElement('a')
-    link.href = url
-    link.download = filename
-    link.click()
-    URL.revokeObjectURL(url)
-  }
+  const [systemStatus, setSystemStatus] = useState<SystemStatus | null>(null)
+  const [systemStatusError, setSystemStatusError] = useState('')
+
+  useEffect(() => {
+    getReports().then(setReports).catch(() => setReports([]))
+    getSystemInfo().then(setSystem).catch(() => null)
+    getSystemStatus().then((payload) => { setSystemStatus(payload); setSystemStatusError('') }).catch(() => setSystemStatusError('System status could not be loaded.'))
+  }, [])
+
+  const systemLine = useMemo(() => system ? `${system.name} ${system.version} · mode=${system.demo_mode ? 'DEMO' : 'LIVE'} · read_only=${String(system.read_only)}` : 'RouteForge v0.5.2-beta · read-only preflight checks', [system])
+  const title = { dashboard: 'Dashboard', asn: 'ASN Check', prefix: 'Prefix Check', preflight: 'Preflight Check', reports: 'Reports', system: 'System Status', about: 'About RouteForge' }[active]
+  const proxyStatus = systemStatusError ? 'ERROR' : 'OK'
 
   return <Layout active={active} onNav={setActive} systemLine={systemLine} title={title} demoMode={Boolean(system?.demo_mode)}>
     {active === 'dashboard' && <section className='space-y-4'>
-      <article className='rf-card p-6'><h1 className='text-2xl font-bold'>RouteForge v0.5.0-beta</h1><p className='mt-2 text-slate-600'>Modernes read-only Operator-Tool für Preflight Checks von ASN, Prefix, RPKI und Registry/IRR.</p><p className='mt-3 rf-alert border-slate-200 bg-slate-50 text-slate-700'>Security-Modell: ausschließlich read-only, keine writes/deployments.</p></article>
-      <div className='grid gap-3 md:grid-cols-3'>{[['ASN Check', 'asn'], ['Prefix Check', 'prefix'], ['Preflight Check', 'preflight'], ['Reports', 'reports']].map(([x, key]) => <button key={x} onClick={() => setActive(key as NavKey)} className='rf-card p-4 text-left hover:border-blue-300'><h3 className='font-semibold'>{x}</h3></button>)}</div>
-      <article className='rf-card p-4'><h2 className='mb-2 font-semibold'>Letzte Reports</h2>{reports.length === 0 ? <div className='rounded-xl border border-dashed border-slate-300 p-6 text-sm text-slate-500'>Noch keine Reports vorhanden.</div> : <div className='overflow-x-auto'><table className='w-full text-sm'><thead><tr className='border-b text-left'><th className='py-2'>Zeit</th><th>Typ</th><th>Resource</th><th>Holder</th><th>Status</th></tr></thead><tbody>{reports.slice(0, 8).map(r => <tr key={r.report_id} className='border-b border-slate-100'><td className='py-2'>{new Date(r.created_at).toLocaleString()}</td><td>{r.check_type === 'preflight' ? 'Preflight' : r.check_type}</td><td>{r.input_resource}</td><td>{r.holder || 'Unknown'}</td><td><StatusBadge status={r.status} /></td></tr>)}</tbody></table></div>}</article>
+      <article className='rf-card p-6'><h1 className='text-2xl font-bold'>RouteForge v0.5.2-beta</h1><p className='mt-2 text-slate-600'>Modernes read-only Operator-Tool für Preflight Checks von ASN, Prefix, RPKI und Registry/IRR.</p></article>
+      <article className='rf-card p-4'><h3 className='font-semibold'>System Health</h3>{systemStatusError ? <p className='text-sm text-rose-700 mt-2'>{systemStatusError}</p> : <div className='mt-2 grid gap-2 text-sm md:grid-cols-4'><div>Status: <b>{systemStatus?.status || 'unknown'}</b></div><div>Mode: <b>{systemStatus?.mode || 'unknown'}</b></div><div>Database: <b>{systemStatus?.database?.status || 'unknown'}</b></div><div>Version: <b>{systemStatus?.version || 'unknown'}</b></div></div>}</article>
     </section>}
     {active === 'asn' && <AsnCheckForm />}
     {active === 'prefix' && <PrefixCheckForm />}
     {active === 'preflight' && <PreflightCheckForm />}
-    {active === 'reports' && <section className='rf-card p-4'><h2 className='mb-3 text-xl font-semibold'>Reports</h2>{reports.length===0 ? <div className='rounded-xl border border-dashed border-slate-300 p-6 text-sm text-slate-500'>Noch keine Reports vorhanden.</div> : <div className='overflow-x-auto'><table className='w-full text-sm'><thead><tr className='border-b text-left'><th>Zeitpunkt</th><th>Typ</th><th>Resource</th><th>Origin-AS</th><th>Holder</th><th>Status</th><th>Kurzfassung</th><th>Actions</th></tr></thead><tbody>{reports.map(r=><tr key={r.report_id} className='border-b border-slate-100'><td className='py-2'>{new Date(r.created_at).toLocaleString()}</td><td>{r.check_type === 'preflight' ? 'Preflight' : r.check_type}</td><td>{r.input_resource}</td><td>{r.origin_as || '-'}</td><td>{r.holder || 'Unknown'}</td><td><StatusBadge status={r.status} /></td><td>{r.summary}</td><td><div className='flex flex-wrap gap-1'><button className='rf-btn-secondary' onClick={() => window.open(`/api/reports/${r.report_id}`, '_blank')}>Open</button><button className='rf-btn-secondary' onClick={async ()=>copyText(await getReportSummary(r.report_id), 'Summary copied')}>Copy Summary</button><button className='rf-btn-secondary' onClick={async ()=>downloadText(`routeforge-report-${r.report_id}.md`, await getReportMarkdown(r.report_id), 'text/markdown;charset=utf-8')}>Download Markdown</button><button className='rf-btn-secondary' onClick={async ()=>downloadText(`routeforge-report-${r.report_id}.html`, await getReportHtml(r.report_id), 'text/html;charset=utf-8')}>Download HTML</button></div></td></tr>)}</tbody></table></div>}{copyMessage && <p className='mt-2 text-sm text-slate-600'>{copyMessage}</p>}</section>}
-    {active === 'about' && <section className='rf-card p-5 space-y-2 text-sm text-slate-700'><p>RouteForge liefert nachvollziehbare Routing-Preflightchecks für technische Operator-Workflows.</p><p><b>Datenquellen:</b> RPKI Validator APIs und Registry/IRR Quellen.</p><p><b>Modell:</b> read-only Betrieb.</p><p><b>Limitations:</b> Externe Datenquellen können unvollständig oder verzögert sein.</p><p><b>Version:</b> v0.5.0-beta</p></section>}
+    {active === 'reports' && <section className='rf-card p-4'><h2 className='mb-3 text-xl font-semibold'>Reports</h2>{reports.length===0 ? <div className='rounded-xl border border-dashed border-slate-300 p-6 text-sm text-slate-500'>Noch keine Reports vorhanden.</div> : <div className='overflow-x-auto'><table className='w-full text-sm'><thead><tr className='border-b text-left'><th>Zeitpunkt</th><th>Typ</th><th>Resource</th><th>Origin-AS</th><th>Holder</th><th>Status</th><th>Kurzfassung</th><th>Actions</th></tr></thead><tbody>{reports.map(r=><tr key={r.report_id} className='border-b border-slate-100'><td className='py-2'>{new Date(r.created_at).toLocaleString()}</td><td>{r.check_type === 'preflight' ? 'Preflight' : r.check_type}</td><td>{r.input_resource}</td><td>{r.origin_as || '-'}</td><td>{r.holder || 'Unknown'}</td><td><StatusBadge status={r.status} /></td><td>{r.summary}</td><td><div className='flex flex-wrap gap-1'><button className='rf-btn-secondary' onClick={() => window.open(`/api/reports/${r.report_id}`, '_blank')}>Open</button><button className='rf-btn-secondary' onClick={async ()=>navigator.clipboard?.writeText(await getReportSummary(r.report_id))}>Copy Summary</button><button className='rf-btn-secondary' onClick={async ()=>{const t=await getReportMarkdown(r.report_id);const a=document.createElement('a');a.href=URL.createObjectURL(new Blob([t],{type:'text/markdown'}));a.download=`routeforge-report-${r.report_id}.md`;a.click()}}>Download Markdown</button><button className='rf-btn-secondary' onClick={async ()=>{const t=await getReportHtml(r.report_id);const a=document.createElement('a');a.href=URL.createObjectURL(new Blob([t],{type:'text/html'}));a.download=`routeforge-report-${r.report_id}.html`;a.click()}}>Download HTML</button></div></td></tr>)}</tbody></table></div>}</section>}
+    {active === 'system' && <section className='space-y-3'>
+      {systemStatusError && <article className='rf-card p-4 text-rose-700'>{systemStatusError}</article>}
+      {systemStatus && <>
+        <article className='rf-card p-4'><h3 className='font-semibold'>Overall Status</h3><p className='text-sm mt-1'>{systemStatus.status}</p></article>
+        <article className='rf-card p-4 grid gap-2 md:grid-cols-2 text-sm'>
+          <div>Version: <b>{systemStatus.version}</b></div><div>Mode: <b>{systemStatus.mode}</b></div><div>Read-only: <b>{String(systemStatus.read_only)}</b></div><div>Demo mode: <b>{String(systemStatus.demo_mode)}</b></div>
+          <div>API Proxy: <b>{proxyStatus}</b></div><div>Database: <b>{systemStatus.database?.status || 'unknown'}</b></div>
+        </article>
+        <article className='rf-card p-4 text-sm'><h3 className='font-semibold mb-2'>RIPEstat Settings</h3><pre>{JSON.stringify(systemStatus.ripestat, null, 2)}</pre></article>
+        <article className='rf-card p-4 text-sm'><h3 className='font-semibold mb-2'>Features</h3><pre>{JSON.stringify(systemStatus.features, null, 2)}</pre></article>
+      </>}
+    </section>}
+    {active === 'about' && <section className='rf-card p-5 space-y-2 text-sm text-slate-700'><p>RouteForge liefert nachvollziehbare Routing-Preflightchecks für technische Operator-Workflows.</p><p><b>Version:</b> v0.5.2-beta</p></section>}
   </Layout>
 }
diff --git a/frontend/src/api.ts b/frontend/src/api.ts
index cc694eb..9deb088 100644
--- a/frontend/src/api.ts
+++ b/frontend/src/api.ts
@@ -1,4 +1,4 @@
-import type { CheckResponse, ReportListItem, SystemInfo } from './types'
+import type { CheckResponse, ReportListItem, SystemInfo, SystemStatus } from './types'
 
 const API_BASE_URL = (import.meta.env.VITE_API_URL || '').replace(/\/$/, '')
 
@@ -51,3 +51,5 @@ export const getReportHtml = (reportId: number) => requestText(apiUrl(`/api/repo
 export const getReportSummary = (reportId: number) => requestText(apiUrl(`/api/reports/${reportId}/summary`), { method: 'GET' })
 
 export const checkPreflight = (prefix: string, planned_origin_as: string) => requestJson<CheckResponse>(apiUrl('/api/check/preflight'), { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ prefix, planned_origin_as }) })
+
+export const getSystemStatus = () => requestJson<SystemStatus>(apiUrl('/api/system/status'), { method: 'GET' })
diff --git a/frontend/src/components/Layout.tsx b/frontend/src/components/Layout.tsx
index c1a66a5..c0922b4 100644
--- a/frontend/src/components/Layout.tsx
+++ b/frontend/src/components/Layout.tsx
@@ -1,6 +1,6 @@
 import { ReactNode } from 'react'
 
-type NavKey = 'dashboard' | 'asn' | 'prefix' | 'preflight' | 'reports' | 'about'
+type NavKey = 'dashboard' | 'asn' | 'prefix' | 'preflight' | 'reports' | 'system' | 'about'
 
 const nav: { key: NavKey; label: string; desc: string }[] = [
   { key: 'dashboard', label: 'Dashboard', desc: 'Overview & quick actions' },
@@ -8,6 +8,7 @@ const nav: { key: NavKey; label: string; desc: string }[] = [
   { key: 'prefix', label: 'Prefix Check', desc: 'Prefix + origin validation' },
   { key: 'preflight', label: 'Preflight', desc: 'Planned prefix-origin validation' },
   { key: 'reports', label: 'Reports', desc: 'History and outcomes' },
+  { key: 'system', label: 'System', desc: 'Operational checks' },
   { key: 'about', label: 'About', desc: 'Data sources and limits' },
 ]
 
@@ -27,7 +28,7 @@ export function Layout({ children, active, onNav, systemLine, title, demoMode }:
           <div className='flex flex-wrap gap-2 text-xs font-semibold'>
             <span className={`rounded-full border px-3 py-1 ${demoMode ? 'border-amber-300 bg-amber-50 text-amber-700' : 'border-emerald-300 bg-emerald-50 text-emerald-700'}`}>{demoMode ? 'DEMO' : 'LIVE'}</span>
             <span className='rounded-full border border-blue-200 bg-blue-50 px-3 py-1 text-blue-700'>READ-ONLY</span>
-            <span className='rounded-full border border-slate-200 bg-slate-50 px-3 py-1 text-slate-700'>v0.5.0-beta</span>
+            <span className='rounded-full border border-slate-200 bg-slate-50 px-3 py-1 text-slate-700'>v0.5.2-beta</span>
           </div>
         </header>
         <main className='space-y-4'>{children}</main>
diff --git a/frontend/src/types.ts b/frontend/src/types.ts
index 1e14361..f822751 100644
--- a/frontend/src/types.ts
+++ b/frontend/src/types.ts
@@ -18,7 +18,6 @@ export type RpkiBatchResult = {
   raw?: Record<string, unknown>
 }
 
-
 export type SourceDiagnostic = {
   name?: string
   endpoint?: string
@@ -50,27 +49,7 @@ export type CheckResponse = {
   recommendations: string[]
   input?: { prefix?: string; origin_as?: string | null; planned_origin_as?: string | null; asn?: string; limit?: number }
   checks?: { rpki?: CheckSection; registry?: CheckSection; routing_visibility?: CheckSection } | null
-  details?: {
-    rpki_explanation?: string
-    extracted_prefixes?: string[]
-    rpki_summary?: Record<string, number>
-    results?: RpkiBatchResult[]
-    checked_prefixes?: number
-    total_prefixes_seen?: number
-    rpki_batch?: {
-      available?: boolean
-      reason_code?: string
-      message?: string
-      prefix_count?: number
-      can_retry?: boolean
-    }
-    limited?: boolean
-    demo_mode?: boolean
-    source_errors?: unknown
-    warnings?: unknown
-    source_diagnostics?: SourceDiagnostic[]
-    [key: string]: unknown
-  }
+  details?: Record<string, unknown>
   markdown: string
   html: string
 }
@@ -94,3 +73,20 @@ export type SystemInfo = {
   read_only: boolean
   data_sources: string[]
 }
+
+export type DatabaseStatus = { status?: string; type?: string; url_safe?: string; error_message?: string }
+export type ApiProxyStatus = { status?: string; mode?: string; frontend_proxy_expected?: boolean }
+export type RipestatRuntimeSettings = { cache_ttl_seconds?: number; timeout_seconds?: number; max_retries?: number; retry_backoff_seconds?: number; use_stale_cache_on_error?: boolean }
+export type SystemFeatures = { asn_check?: boolean; prefix_check?: boolean; preflight?: boolean; reports?: boolean; exports?: boolean; data_source_diagnostics?: boolean; cache_freshness?: boolean; retry_resilience?: boolean }
+export type SystemStatus = {
+  status?: string
+  name?: string
+  version?: string
+  read_only?: boolean
+  mode?: string
+  demo_mode?: boolean
+  database?: DatabaseStatus
+  api_proxy?: ApiProxyStatus
+  ripestat?: RipestatRuntimeSettings
+  features?: SystemFeatures
+}