Identity & policy
NHI attestation + runtime guardrails
spiffe://blekline.internal/ns/prod/sa/data-agent-v2
Policy definition (YAML) · Trust Vault
Threat / payload simulator
Rogue agent defense — contaminated session + destructive SQL in tool params.
Runtime interceptor console
Traces use Lineage Firewall and Trust Vault semantics where labeled.
Awaiting execution…