● Illustrative preview · synthetic data · the operator's view across every tenant — the channel the customer can't be managed without. The real Console is password-gated over the hub's live fleet API (task · dual Recall).

Fleet — all tenants

12 embassies · 5 tenants · hub: dial-out, zero inbound · one Console for a DoD program office and a commercial CISO alike — the same governed channel, dialed to each VPC's tier
AWS GovCloud (US) · FedRAMP High · IL5
5
TENANTS
11/12
EMBASSIES ONLINE
8,402
GOVERNED ACTIONS · 24H
214
BLOCKED BY TREATY
1
RECALLS · 24H
Command

Embassies

see · task · Recall — one governed channel · tier dial: Bolt-on → Regulated → Sovereign (SOV/REG/BOLT below)
patient-intake
acme-health
SOV
sealtreaty
claims-triage
bluecross
REG
sealtreaty
fraud-consortium
3-bank clean room
REG
teetreaty
billing-qa
retailco
BOLT
license · 4d
recon-node
gov-agency
SOV
recalledaudit kept

Issue agent identity

SPIFFE · short-lived · scoped
triage-agent
spiffe://legation/acme-health/patient-intake/…
issued · 12m
adjudicator
spiffe://legation/bluecross/claims-triage/…
issued · 9m
fraud-scorer
spiffe://legation/medflow/fraud-consortium/…
rotated · 14m

Transparency log

operator-signed · witness co-signed
✓ Checkpoint #4,182 signed
✓ Independent witness co-signature verified
head  7a4f1c9e…2b08 · size 4,182