Command Center

D6

Agent Readout

Category Security
Permission Level 0
Activity 11570
Incidents 0
Approvals 6

Permission Matrix

read-only default

Allowed Tools

repo_scan github_security_read policy_report_read

Approval Required

create_security_issue modify_policy

Blocked Actions

expose_secret_value

Agent Workbench

SEC-4-SENTINEL · Security · Level 0
APPROVAL snapshot
Security Trust BLOCKED 1 fail · 5 warn · 5 pass
Collector Trust WARN 0 targets · 0 snapshots
Redaction PASS passing
Audit WARN 6 pending approvals
Droid Shop LIMITED Droid Shop security posture is limited.
Lifecycle INCIDENT 5m since run · 6 approvals

SEC-4 Overview

Incident
Droid Ops Self-Security Droid Ops cloud self-security has unsafe production settings.
Lifecycle Incident SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s).
Freshness
Snapshot
Last Run
5m ago
Stale At
Refresh with rerun posture
Pending
6 proposals · 6 approvals
Trust
BLOCKED
Collector
WARN
Droid Shop
LIMITED
Passing Gates
5
Warning Gates
5
Failed Gates
1

Gate Matrix

11 controls
  1. PASS RBAC

    Viewer, operator, and approver groups are configured.

  2. WARN Collector Ingestion

    Local collector ingestion is disabled.

  3. WARN Collector Trust

    No Droid Shop local collector target has reported yet.

  4. PASS Redaction

    Common token, API key, and password patterns are redacted.

  5. PASS Persisted Evidence Redaction

    Bounded persisted evidence scan found no unredacted secret-shaped content.

  6. PASS Local/Cloud Boundary

    No unsafe cloud-to-local access path is enabled.

  7. PASS Remediation Policy

    Control-plane remediation policy prerequisites are configured and visible.

  8. FAIL Droid Ops Self-Security

    Droid Ops cloud self-security has unsafe production settings.

  9. WARN Railway Credentials

    Railway project configuration is incomplete for Droid Shop or Droid Ops.

  10. WARN Auditability

    Audit retention visibility found records older than configured retention.

  11. WARN Droid Shop Security

    Droid Shop security posture is limited.

Collector Trust

WARN

Local collector ingestion is disabled.

Collector Evidence
Collectors
No local collectors registered.
  1. No collector snapshots stored. Run POST smoke to store local collector evidence.

Secrets & Redaction

PASS
PASSING Common token/password patterns are redacted.
Railway token
missing
Droid Shop Railway project token
configured
Droid Ops Railway project token
missing
Railway project token
missing
Local collector token
missing
OpenAI API key
missing
Mistral API key
missing

Audit & Approvals

WARN
Pending Approvals
6
Local/Railway TTL
600s
Production TTL
300s
Production Re-auth
required
Evidence Retention
days
Summary Retention
days
Audit Retention
days

SEC-4 Activity

25 events
  1. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  2. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  3. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  4. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  5. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  6. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  7. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  8. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  9. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  10. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  11. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  12. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  13. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  14. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  15. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  16. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  17. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  18. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  19. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  20. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  21. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  22. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  23. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  24. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.
  25. sec4_posture_checked SEC-4 found 1 failed, 5 unresolved warning, and 0 accepted warning gate(s). SEC-4 posture is blocked. Primary issue: Droid Ops cloud self-security has unsafe production settings.