Agent Mesh Topology
Active agents
23
Denied calls
142
24h
Latency
18ms
p99
Deterministic Permissions
| Agent | Scope | Decision |
|---|---|---|
| Orchestrator | read:crm | Allow |
| Research | write:erp | Deny |
| North quay cutover | Open | Open |
| East yard sweep | Running | Running |
| Night batch 14 | On Track | On Track |
| Canary 10% | At Risk | At Risk |
| Blue-green 2.4 | Queued | Queued |
| Freeze window | Resolved | Resolved |
| Pager rewrite | Escalated | Escalated |
| Token ceiling | Pending | Pending |
| Shadow path | Open | Open |
| Guild review | Running | Running |
| License reclaim | On Track | On Track |
| Merge train | At Risk | At Risk |
| Eval nightly | Queued | Queued |
| Prompt budget | Resolved | Resolved |
| Board brief | Escalated | Escalated |
| SLA watch | Pending | Pending |
| Deny list | Open | Open |
| mTLS rotate | Running | Running |
Short-lived Tokens
SPIFFE-style identity per agent invocation.
OPA Policy Sets
Rego v2Signed bundlesGitOps
Threat Detections
- Blocked lateral tool hop agent-7 → agent-2
- Rate limit on embedding exfil attempt
Workload Identity
SVC-agent-orch
mTLS valid
Decision Logs
Every tool call recorded with policy version hash.
Mesh config
Default deny · break-glass requires dual approval
Zero-Trust Agent Mesh journal
Session log for this simulated zero-trust desk. Not a live production feed.
| Event | Actor | When | Status | Score |
|---|---|---|---|---|
| Zero-Trust weekday CSV open | Ops | 07:02 | On Track | 92% |
| Zero-Trust desk record add | Ops | 07:14 | Running | 88% |
| Zero-Trust P1 watch fire | Reviewer | 07:21 | Escalated | 41% |
| Zero-Trust exception approve | Reviewer | 08:05 | Resolved | 95% |
| Zero-Trust 07:00 schedule set | Sponsor | 08:12 | Queued | 74% |
| Zero-Trust filter At Risk | Ops | 08:40 | On Track | 81% |
| Zero-Trust row View open | Ops | 09:01 | Running | 86% |
| Zero-Trust row Edit save | Reviewer | 09:18 | On Track | 90% |
| Zero-Trust row Delete confirm | Reviewer | 09:33 | Resolved | 93% |
| Zero-Trust role switch | Sponsor | 10:02 | Queued | 77% |
| Zero-Trust mobile nav jump | Ops | 10:15 | On Track | 84% |
| Zero-Trust seed pad to 20 | Ops | 10:22 | Running | 89% |
| Zero-Trust schedule weekday | Sponsor | 11:00 | Pending | 68% |
| Zero-Trust CSV download | Ops | 11:08 | On Track | 91% |
| Zero-Trust idle reclaim | Reviewer | 12:01 | Open | 62% |
| Zero-Trust token ceiling | Sponsor | 12:40 | At Risk | 49% |
| Zero-Trust deny-list drift | Reviewer | 13:05 | At Risk | 53% |
| Zero-Trust gold-path flake | Ops | 13:44 | Escalated | 47% |
| Zero-Trust board pack draft | Sponsor | 14:10 | Queued | 71% |
| Zero-Trust session keep-alive | Ops | 14:55 | On Track | 97% |
- Zero-Trust Agent Mesh: opened weekday CSV for the live filter
- Zero-Trust Agent Mesh: added a desk record from the rail
- Zero-Trust Agent Mesh: P1 watch fired and stayed in session
- Zero-Trust Agent Mesh: reviewer approved one exception
- Zero-Trust Agent Mesh: scheduled 07:00 delivery on this device
Zero-Trust Agent Mesh scorecards
Ten-plus working reports for this desk. Export carries the active filter.
| Report | Owner | Cadence | Status | Score |
|---|---|---|---|---|
| Zero-Trust open queue | Ops | Weekdays 07:00 | Live | 91% |
| Zero-Trust at-risk rollup | Reviewer | Fridays 16:00 | Live | 84% |
| Zero-Trust executive brief | Sponsor | Monday 08:30 | Queued | 72% |
| Zero-Trust exception log | Reviewer | Daily 18:00 | Live | 88% |
| Zero-Trust capacity watch | Ops | Hourly | Running | 79% |
| Zero-Trust board pack | Sponsor | First Monday | Pending | 61% |
| Zero-Trust SLA burn | Ops | Weekdays 16:00 | On Track | 86% |
| Zero-Trust audit extract | Reviewer | Month end | Queued | 70% |
| Zero-Trust idle reclaim | Ops | Wednesdays | Open | 64% |
| Zero-Trust token spend | Sponsor | Fridays 09:00 | Live | 81% |
| Zero-Trust deny-list drift | Reviewer | Daily 06:00 | At Risk | 52% |
| Zero-Trust gold-path CI | Ops | On merge | Running | 77% |
| Zero-Trust skill coverage | Sponsor | Biweekly | Open | 66% |
| Zero-Trust pager rewrite | Ops | Thursdays | Queued | 58% |
| Zero-Trust license waste | Reviewer | Month start | Resolved | 93% |
| Zero-Trust canary 10% | Ops | On deploy | On Track | 85% |
| Zero-Trust incident drill | Ops | Monthly | Queued | 69% |
| Zero-Trust shadow IT sweep | Reviewer | Monthly | At Risk | 48% |
| Zero-Trust pairing rota | Sponsor | Weekly | Live | 82% |
| Zero-Trust capacity bid | Ops | Monthly | Pending | 59% |
Zero-Trust Agent Mesh export history
CSV of the visible filtered table. Cadence stays on this device for the session. Simulated — no outbound mail.
| Delivery | Owner | Cadence | Status | Score |
|---|---|---|---|---|
| Zero-Trust weekday open-queue CSV | Ops | 07:00 | Live | 94% |
| Zero-Trust at-risk Friday pack | Reviewer | 16:00 | Live | 87% |
| Zero-Trust Monday exec brief | Sponsor | 08:30 | Queued | 73% |
| Zero-Trust daily exception CSV | Reviewer | 18:00 | Live | 90% |
| Zero-Trust hourly capacity dump | Ops | Hourly | Running | 80% |
| Zero-Trust board pack ZIP | Sponsor | First Monday | Pending | 62% |
| Zero-Trust SLA burn CSV | Ops | 16:00 | On Track | 85% |
| Zero-Trust month-end audit | Reviewer | Month end | Queued | 71% |
| Zero-Trust idle reclaim list | Ops | Wed 09:00 | Open | 65% |
| Zero-Trust token spend CSV | Sponsor | Fri 09:00 | Live | 83% |
| Zero-Trust deny-list delta | Reviewer | 06:00 | At Risk | 51% |
| Zero-Trust gold-path report | Ops | On merge | Running | 78% |
| Zero-Trust skill matrix export | Sponsor | Biweekly | Open | 67% |
| Zero-Trust pager rewrite log | Ops | Thu 11:00 | Queued | 57% |
| Zero-Trust license waste CSV | Reviewer | Month start | Resolved | 92% |
| Zero-Trust canary summary | Ops | On deploy | On Track | 86% |
| Zero-Trust incident drill pack | Ops | Monthly | Queued | 70% |
| Zero-Trust shadow IT export | Reviewer | Monthly | At Risk | 47% |
| Zero-Trust pairing rota CSV | Sponsor | Weekly | Live | 81% |
| Zero-Trust capacity bid sheet | Ops | Monthly | Pending | 60% |