This preview is password protected.
Pillar 01 · Identify · Proof artifact
An excerpt from a Census Sprint report on a demonstration estate. This is what the first two weeks produce: every agent-like signal found across seven evidence planes, reconciled against the registry, with a verdict and an action for each.
| Entity | Evidence planes | Verdict | Action |
|---|---|---|---|
| NightOwl, employee laptop Agent workspace artifacts, scheduler wakeup every 30 minutes, recurring provider traffic | Endpoint artifacts, process, network cadence | UNDECLARED | Interview the owner, register or remove. Confidence 100: three independent planes agree. |
| AKIA-ROGUE-77, cloud key Created outside change process, minted further credentials, read secrets | Cloud audit trail | UNDECLARED | Deactivate the key, revoke sessions, open incident INC record with ledger evidence. |
| ShadowChat AI, SaaS application OAuth grant with broad scopes, no entry in the declared apps list | Identity, OAuth grants | UNDECLARED | Revoke the grant or declare the app with an owner and a data scope. |
| ws-2210, workstation Regular DNS lookups to an AI provider no registered agent uses | DNS and proxy metadata | UNDECLARED | Endpoint bundle collection to identify the process behind the traffic. |
| DataSync AI, integration app Declared by IT after the census interview; no owner on file | Identity, registry | CANDIDATE | Assign a named owner and complete registration. Candidates are never auto-blocked. |
| governed-agent, operations server Registered, attested, passport valid, zones respected | Registry, runtime logs, endpoint | DECLARED | None. This is what good looks like, and the census proves it continuously. |
Demonstration estate data. A client census reports the client estate only, with evidence pointers into the ledger for every verdict.
Seven planes feed one fusion: runtime logs, identity and OAuth, cloud audit, MCP servers, DNS and proxy metadata, endpoint artifacts, and the registry itself. A lone signal is a candidate, never a verdict. Confidence rises when independent planes corroborate, which is why a heartbeat file on a laptop means little alone, and everything when the scheduler, the process, and the provider traffic agree. The one named blind spot is browser session telemetry inside SaaS applications; the answer is attestation at the edge, where an agent must present its passport before it is served.
Measured, not marketed: against a planted ground truth of 11 rogue entities, the fusion caught 11 of 11 (recall 1.000), and the misses in the red team suite are published in the same report series, with mitigations.
Open a Census Sprint Run the Quick Sweep first