Regulated Enclave Mode

Inbound channel controls

Tripping the inbound kill switch drops every signed event from the enclave to a REJECTED / inbound_disabled ack. Workflows, scheduling, and the OUTBOUND enclave redirect keep running.

Kill switch + history

Both global (singleton) and per-tenant toggles, plus every toggle the gateway has recorded. Distinct from the general audit ledger.

Kill switch status

Flipping the kill switch stops the enclave→KeepGrade event channel. The OUTBOUND redirect, workflows, and scheduling stay operational.

Loading kill switch status…

Recent toggle history

Every kill-switch write lands one row here. Distinct from the general audit ledger.

No toggle history to display.

Boundary crossing log

One row per ACCEPTED event whose opaque record id + status crossed into KeepGrade. Distinct from the forensic enclave event feed.

Boundary crossing log

One row per ACCEPTED event whose opaque record id + status crossed into KeepGrade. Distinct from the forensic event feed and the general audit ledger.

Loading boundary log…

Boundary proof

A repeatable synthetic proof of the KeepGrade→Volkmann enclave boundary. It records only safe outcomes and hash-chained evidence.

Synthetic assurance slice

KeepGrade → Volkmann boundary proof

Exercises the closed crossing policy with synthetic markers only. Results contain hashes, safe check codes, and opaque scope identifiers.

Loading the latest proof…