Confirm connectivity and review the live tenant snapshot.
- Confirm the control-plane indicator is connected.
- Change the time range to update telemetry.
- Use Reset demo data only when you intend to remove demo-time mutations.
Current boundaryRuntime toggles are presentation controls until gateway lifecycle APIs are implemented.
Review MCP servers, tools, risk, and default access.
- Select a server to inspect its tools and scopes.
- Choose Register server to create a tenant-scoped pending entry.
- Use policies to govern tools exposed by approved servers.
Current boundaryAutomatic discovery and catalog approval are not yet implemented.
Create, activate, and simulate deny-by-default authorization rules.
- Create a draft with server, effect, priority, principal, and tool patterns.
- Open the persisted draft and activate it.
- Simulate a matching call and confirm the selected policy and outcome.
Current boundaryEditing, rollback, staged rollout, archive, and signed bundle delivery remain future work.
Inspect boundaries and collect evidence from a real Docker agent.
- Open Air-gapped agent.
- Run the isolation test.
- Review identity, storage, privilege, workspace, and public-network checks.
Current boundaryThe demo runner is long-running and executes a fixed probe; per-run workload containers are next.
Review endpoint identity, status, bundle version, and posture.
- Compare online, offline, stale-policy, and revoked examples.
- Open an agent for its stable ID and last-seen details.
Current boundaryProduction enrollment, rotating credentials, posture ingestion, and revocation are not implemented.
Persist a human decision for approval-required tool calls.
- Open a pending request.
- Approve or deny it.
- Refresh and confirm the reviewer and status persist.
Current boundaryA decision does not yet resume or terminate a waiting gateway call.
Investigate decisions using outcomes, policies, and correlation IDs.
- Filter the current event window by outcome.
- Open a detail route to inspect decision context.
- Export the loaded tenant-scoped window as JSON.
Current boundaryProduction ingestion, retention enforcement, and SIEM delivery remain future work.
Preview organization, identity, credential, retention, and integration surfaces.
- Use Settings and organization routes to review planned enterprise capabilities.
- Treat displayed administration records as scenario-owned documentation.
Current boundaryAdministration mutation remains disabled until authenticated OIDC/RBAC and persistence contracts land.