KK-ShieldEnterprise · Sentinel
Docsv5.0.0

OBSERVATION CONTEXT

Compare posture without flattening context.

Different network positions can produce different, valid observations.

The model

01

Local Origin

Observe an authorized origin through an explicit loopback or private transport while preserving its public canonical identity.

02

Public Edge

Observe an explicitly authorized public endpoint, including behavior visible at the reachable edge.

03

Remote Authorized

Use the optional owner-managed authorization channel for controlled remote observation.

Effective posture

Correlation requires the same canonical target and compatible context. It can express aligned, local-only, edge-only, conflicting, or unknown signals; broader plugin semantics remain bounded.

Choose safely

  • Local Origin for direct authorized origin observation
  • Public Edge for an explicitly authorized public endpoint
  • Remote Authorized only when its owner-managed authorization channel is needed