North Star pipeline
Ordered gates read from
_authorization_gate_phases() — not a hardcoded diagram.
Decision
——
Delegation authority
—Risk & security posture
Control plane write
Connect agents and author rules. Each action calls one existing public SDK method — no separate authorization logic.
Start with python -m firewall.ui --control. The token is
printed once and can mint authority — keep it local.
Global rules
Applied to every authorization.
Leave empty for unbounded. Enforced by the existing depth-policy gate, not here.
Propose a rule change simulate first
Replays the requests this console has authorized against the proposed rules, in throwaway workspaces, before anything takes effect. 0 recorded case(s) available — authorize a request above to record one.
Connected agents
0Control-plane audit
Every UI-originated action, accepted or rejected. Newest first.
Capabilities
Signatures and public keys are withheld by the projection layer.
Lifecycle & evidence
Append-only event record, newest first.
Authorization trace
Canonical SecurityDecision as returned.
—
Security flight recorder v1.8
Portable, cryptographically verifiable security history. The artifact records what happened and why; verification, replay, and the graph are derived from recorded events only.
Agent security timeline
Every event is inspectable: from timeline to event to decision to authority chain to evidence.
Security trajectory
How posture changed, and the evidence for every transition.
Security relationship graph
Derived from recorded authority and decisions. Why could this agent do this? What could it reach?
Containment
Explicit state transitions, audited. Mutations go through the control plane.
Replay laboratory
Ask what would have happened under a different policy. Replay runs the real authorization pipeline in throwaway workspaces.