Actions affect real systems. Review each operation before authorizing it. Every mutation requires the existing server policy and a fresh passkey assertion.
Data handling
Views display authorized server evidence. Unavailable signals remain explicitly unavailable. Observation time and read time are distinct; a page refresh does not create a new probe observation.
Audit verification checks the server ledger. Grant application describes the owned host firewall; public-route and SSH-login proof are separate evidence. Private keys and recovery secrets are never included in these read views.
Keyboard
Ctrl K Command paletteG then N New grantG then H HostsG then A Audit ledgerT Cycle themeW Guided walkthroughEsc Close sheet or walkthrough
Using the control plane
- Compose a grant using the current external source, selected hosts, duration, and operational reason.
- Preview seals a pending operation. Authorization requires a fresh user-verified passkey within its single-use window.
- Open a host or grant to inspect independent state, public endpoint, and available evidence.
- Use Monitoring scope to select an environment before any consequential action. The aggregate is read only.
- Consult the Monitoring guide for incident response, history, ownership, and collection boundaries.
- Theme and navigation preferences change presentation only.