Enrol a source and activate the policy
A source is a system that signs and sends agent-evidence records: a policy store, an operations log, an approval service, an executor, an observer.
- Agree the integration contract: source id and owner, subject-to-cell bindings, the record types the source may send, the principals it may report (grant issuers, authorisers, acceptors, remitRemitA written list of an agent’s allowed actions, resources and destinations for information. The list states whether it is complete. issuers), the environment, cadence and correction method.
- Create the enrolmentEnrolmentThe operator's recorded permission for a source to send specified record types about named agents, using an identified signing key. with the connectorsConnectorSoftware that reads records from a source system, such as an incident tool. A customer-written file connects those records to teams or services in NovusLens. command line:
agent-source enrol. The source keeps its private keyPrivate keyA secret value used to create digital signatures. The source keeps it so others cannot sign evidence in its name.; enrolment records only its public keyPublic keyA value used to check a digital signature. Sharing it lets others check signatures but does not let them create new signatures.. - Run the checker against an unsigned mapped batch and the enrolment:
agent-source check. - Activate the policy. Activation is an operator act, recorded with an epoch; editing a file alone changes nothing.
- Send through the reference producer and confirm the durable receipt, then the record in the permitted reader’s view.
For Docker commands that accept --viewer, including policy activation and outcome criteria, name the operator login created by the installer. Do not assume that account is called operator. Use the configured operator shell.
Eligibility follows the active policy: a disabled source, a rotated key or a changed binding withdraws support from that source’s records, and their findingsFindingA difference in the records that needs a decision. It includes its sources and can describe a slow handoff, disputed fact or missing owner. are withheld rather than shown.
Read more
Last updated