Labels

Agent registry, kill-switch, governance features

Audit log, sinks, fan-out

W3 — auto-response loop (revoke / step-up / alert)

SOC2 / PCI / HIPAA / NIST AI RMF / EU AI Act

Cryptographic ops, RoT, key lifecycle

Docker, Helm, k8s operator, deployment topology

Identity, OIDC, JWT, agent tokens

AWS-specific integrations

Azure-specific integrations

GCP-specific integrations

Apache Kafka audit fan-out / source

MySQL / MariaDB event journal adapter

NATS / NATS JetStream audit fan-out

OIDC providers (Keycloak / Authentik / Dex / Okta / Auth0)

Open Policy Agent (Rego) externalised policy

Redis (jti revocation, rate limit, nonce cache)

Splunk HEC audit sink

SQLite event journal (embedded / dev)

HashiCorp Vault adapter / Transit RoT

Per-tenant isolation

Metrics, traces, logs

Policy engine, rule evaluation, decision recording

W2 — risk scoring / step-up logic

Scala / Java / Python / TS / Go / Rust SDKs

Pekko-based server modules (server, http, kmip, mcp, agent-ai)

The four-pillar differentiator

W4 — read-only LLM advisor

Agent-AI plane (function-call shape)

KMIP TTLV / TLS / multi-version

Model Context Protocol server