ZEROSHIELD / ANALYST WORKSPACE

Investigate the AI estate

A dated demo workspace. Start with a sample path, then inspect its evidence.

AI use cases

Pass

Stage checks failing

Fail

Stage checks unknown

Unknown

Open findings

Fail

Connectors not healthy

Partial

Selected investigation

Potential access, not proof of disclosure.

svc-support-prod

Support Copilot

Shared RAG index

Employee payroll

Risky — broader than source ACL

Indexed grant exceeds the source ACL. Check freshness and authorization before deciding.

Trace path →Open agent →

Lifecycle coverage

Stage evidence across registered use cases.

pass

fail

partial

stale

unknown

not applicable

Review lifecycle stages →

Priority tasks

The smallest set of actions that improves known coverage and reduces active risk.

Verify critical remediation2 critical findings need proof of closure.Review connector gapsNo customer connector is attached; inspect simulated scope and capability limits.Assign HR data ownerRestricted data cannot be approved without accountability.

Detailed lifecycle, findings and evidence register

Use cases by lifecycle position

Coverage percentage counts stage checks with current evidence against all applicable stages.

Scroll table sideways for more columns →

Use case	Owner	Environment	Exposure	Coverage	Last evidence	Open findings
Customer Support Copilot uc-support-copilot	Priya Raman	production	high	78%	5 min ago	2
Contract Clause Analyst uc-contract-analyst	Daniel Okoye	production	critical	61%	9 h ago	1
Internal Code Agent uc-code-agent	Mei Tanaka	staging	high	54%	1 h ago	1
HR Insights Assistant uc-hr-insights	No accountable owner	development	critical	32%	16 d ago	1
Air-Gapped Field Advisor uc-field-advisor	Sofia Lindqvist	air-gapped	medium	71%	3 d ago	—

Highest-severity open findings

Potential access and observed disclosure are recorded separately on each finding.

Revoked users can still retrieve chunks from support-eu-v12
fnd-2291 · R24 — index ACL drift · detected 24 Sep 2026, 02:35 UTC
critical
1 observed disclosure2 potential access pathsEvidence pass
Blind interval: EU prompt-log collector silent for 3h11m
fnd-2304 · R41 — missing telemetry read as no incidents · detected 22 Sep 2026, 19:40 UTC
medium
No observed disclosure1 potential access pathsEvidence pass
Contract content used as a training input under a deny decision
fnd-2277 · R09 — unauthorized training purpose · detected 9 Sep 2026, 08:15 UTC
critical
1 observed disclosure2 potential access pathsEvidence partial
Code agent holds 9 MCP tools beyond its approved purpose
fnd-2312 · R33 — excessive agency · detected 24 Sep 2026, 05:05 UTC
high
No observed disclosure2 potential access pathsEvidence pass

Operational limits right now

What the console cannot currently see or assert.

5 of 8 connectors are unreachable, stale or partially capable. Their surfaces are coverage gaps, not clean results. See coverage.

A 3h11m blind interval on 22 Sep has no boundary receipts, and provider-side logs had already expired when backfill was attempted.

Release Contract Analyst 2026.09.8 is refused server-side. Promotion cannot be forced from this console.

2 use cases carry at least one stale stage: HR Insights Assistant, Air-Gapped Field Advisor.

DSPM cycle

The discovery-to-verification cycle runs inside every applicable lifecycle stage.

C01DiscoverEnumerate assets and movement; record inventory denominator and inaccessible surfaces.
C02ClassifyLabel sensitive content with detector, confidence, format support and policy version.
C03Map lineage and accessLink sources, derivatives, identities, permissions, purpose and destinations.
C04Assess and prioritizeExplain impact, exposure, freshness, evidence quality and control gaps.
C05Enforce and remediateApply supported local or source controls under scoped authority.
C06VerifyRead back source state and retest the forbidden path and legitimate paths.
C07Monitor and auditWatch changes and exceptions; retain protected evidence for a bounded period.
C08Respond and improveInvestigate changes and incidents, assign owners, retest the path and feed lessons into the next cycle.

Recent evidence

Every record links back to the producer and its expiry.

Release manifest 2026.09.3
ev-rel-3 · manifest · producer release-service · collected 19 Sep 2026, 08:05 UTC (5 d ago)
SignedValid to 19 Dec 2026, 00:00 UTC
Deployment reconciliation receipt
ev-dep-3 · receipt · producer reconciler-eu · collected 24 Sep 2026, 06:00 UTC (15 min ago)
SignedValid to 25 Sep 2026, 06:00 UTC
Release manifest 2026.09.8
ev-rel-8 · manifest · producer release-service · collected 17 Sep 2026, 09:30 UTC (7 d ago)
SignedNo expiry set
Offline release bundle manifest
ev-rel-e4 · manifest · producer enclave-release · collected 14 Sep 2026, 09:00 UTC (10 d ago)
SignedValid to 14 Mar 2027, 00:00 UTC
Index ACL drift snapshot restricted preview
ev-idx-9 · scan · producer collector-eu-03 · collected 24 Sep 2026, 02:30 UTC (4 h ago)
SignedValid to 1 Oct 2026, 00:00 UTC

Full evidence register

Open the audit screen