RedWatch Operator Surface

Sentinel-first sovereign security harness.

RedWatch owns evidence, governed execution, readiness, and Purple observation on the local node.

Platform RedWatch sovereign local security plane

Posture Unknown surface loading

Active Findings Unknown awaiting verified findings source

Evidence Unknown awaiting verified evidence source

Boundary Truth

Purple-restricted requests are admin-only and evidence-first.

Surface Planes

These are the real lanes the harness exposes today, sourced from the live RedWatch surface contract.

Sentinel Ops

Host signal truth, automatic readiness projection, and governed evidence commits for local node security.

Signal Types - event envelope support

Mapped Checks - readiness projection targets

Artifact Commit - default ingest behavior

Transport - collector envelope

Host Signal Map

Sentinel Boundary

Manual Sentinel Ingest

Sentinel ID Circuit ID Signal Type Severity Signal Name Target Ref Summary Commit artifact

No sentinel event committed yet.

Purple OSINT

Passive, attributable public-surface intelligence bound to governed workspace and evidence capture.

Mode - collection posture

Collectors - passive inventory

Workspace Hooks - purple workspace integration

Readiness Projection - public posture checks

Collector Inventory

Governance Fields

Passive Collection

Tenant Engagement Target Type Target Value Workspace ID Authorization Ticket Legal Approval Statement Of Work Dry Run

No OSINT report collected yet.

Governed Readiness

CMMC-oriented control-state visibility, evidence integrity, and remediation tracking.

Readiness Score - waiting for runtime

Evidence Completeness - no data yet

Target CMMC - readiness mode pending

Affirmation / SPRS - no due date loaded

Operator Queue

Executive Deadlines

Vendor Risk

Governed Task Composer

Tenant Engagement Session Type Target Type Target Value Risk Runbook ID Runbook Signature Approval Ticket Approval Reason Dual Approval Dry Run

Evidence + Feed

Findings, governed tasks, evidence ledger, audit stream, and transition history all stay attributable here.

Finding	State	Severity	Target	Updated

Task	Type	Target	State	Risk	Updated

Evidence	Task	Hash	Stored	Collected