policy
permission_mode, sandbox_policy, and permission_profile.
● Environment Layer · Security Telemetry
Security & Authority Posture
Counts of explicit source-field observations. Values stay inside a closed vocabulary, with other when the source is outside it. Command text is never stored. A grant is not effective authority. An empty lane is not a measured zero.
All-time counts — window_from/window_to label the snapshot but do not filter.
Closed Security Vocabulary Lanes: Evaluates security stance across 6 deterministic dimensions:
Policy & Profile
Configured permission_mode, sandbox_policy, and permission_profile governing agent boundaries.
Grant vs Authority
Recorded approval decisions and prefix permissions. A grant does NOT infer effective authority without explicit verification.
Attempt Categories
Observed dangerous command categories (e.g. force_push, privilege escalation) without persisting raw command strings.
Secret & Command Hygiene
Command line arguments, environment variables, and authentication tokens are strictly omitted from storage.
Closed vocabulary standards and compliance boundaries:
Observations
Total recorded security telemetry events in observation window
Audited count
Max Sessions in Posture
Peak session concurrency sharing identical permission settings
No unmanaged drift
Effective Authority
Not inferred; requires policy proof to transition from 'Not assessed'
Grant != authority
Command Text
Raw commands are strictly omitted from all persistence layers
Zero secret leakage
grant
permission_decision and approved_prefix_count. A grant does not confer effective authority.
approval
approval_policy. This is an observed field, not a review verdict.
attempt
dangerous_command category and sandbox_override_requested. The command line is omitted.
effective_authority
Not inferred. Without a policy layer the assessment stays not assessed.
effect
Not stored. Absence of an effect row does not mean the action had no effect.
Observations
—
Max Sessions in Posture Bucket
—
Effective authority
Not assessed
Command text
Omitted
Recorded Rows v_security_posture rows
0 Rows
| Lane | Harness | Kind | Value | Observations | Sessions |
|---|
Technical Lineage, Coverage & SQL Proof (L3)
Underlying SQL Projection
SELECT * FROM v_security_posture ORDER BY observation_count DESC, harness, kind;
Connected fact rows
Recorded window: —
Total rows: —