Fleet
5 embassies across 5 customer VPCs · one dial: commercial Bolt-on → Regulated → DoD Sovereign — the same envelope, dialed · last sync 14:32:07 UTC
4/5
EMBASSIES ONLINE
1,284
GOVERNED ACTIONS · 24H
37
BLOCKED BY TREATY
2
BEHAVIORAL ANOMALIES
0
BYTES OF IP EXFILTRATED
Embassies
patient-intake
acme-health · vpc-0a91f3
acme-health · vpc-0a91f3
SOVEREIGN
sealtreatylicenserecall ✓
claims-triage
bluecross · vpc-7c22e1
bluecross · vpc-7c22e1
REGULATED
sealtreatylicenserecall ✓
fraud-consortium
clean room · 3 banks · TEE
clean room · 3 banks · TEE
REGULATED
sealtreatytee-attestedrecall ✓
billing-qa
retailco · vpc-3f88a0
retailco · vpc-3f88a0
BOLT-ON
sealtreatylicense · 4drecall ✓
recon-node
gov-agency · vpc-il5-009
gov-agency · vpc-il5-009
SOVEREIGN
recalledsealedaudit preserved
Decision log
14:32ALLOWextract patient_record.fhir → structure (12 symbols)
14:31BLOCKexfiltrate /etc/shadow → not on treaty allowlist
14:30ALLOWrun_assurance → PASS (214/214), verdict only
14:28ESCALATEdelete_cohort → escalated to human oversight
14:27ALLOWquery_claims → projection (842 records, 0 PII crossed)
14:25BLOCKhttp POST attacker.io → egress denied (membrane)
Agent identities
triage-agent
spiffe://legation/acme-health/patient-intake/…
exp 12mspiffe://legation/acme-health/patient-intake/…
adjudicator
spiffe://legation/bluecross/claims-triage/…
exp 9mspiffe://legation/bluecross/claims-triage/…
fraud-scorer
spiffe://legation/medflow/fraud-consortium/…
exp 14mspiffe://legation/medflow/fraud-consortium/…
Attestation
✓ Sealed bags verify against accreditation key
✓ Transparency log co-signed by independent witness
log head 7a4f1c9e…2b08