KK-ShieldEnterprise · Sentinel
Docsv5.0.0

PERSPECTIVE

Identity and observation endpoint are different facts.

Local Origin separates the canonical asset from its explicitly authorized private transport.

Canonical target

https://app.example.com/

The public identity the report is about.

Transport endpoint

http://127.0.0.1:8001/

The loopback/private endpoint receiving requests. Reports record both values; publicly resolving Local Origin transports fail closed.

What is not measured

  • CDN or WAF behavior
  • public TLS
  • public DNS or mail security
  • other edge controls