Provisions and governs per-agent OS identities so each agent can perform ONLY its own privileged work. Each agent owns a locked OS user that owns its privileged write surface; owne

The IAM/PAM/JIT platform Heimdall runs directly: the registry RBAC schema (roles, permissions, grants), just-in-time expiring access, the credential vault and rotation, and the acc

Tyr's security operations centre: brokering and expiring just-in-time access, continuous session and threat monitoring, incident response, and business-continuity / disaster-recove

Forseti's governance function: maintaining the security policy set, the risk register, periodic access recertification, and segregation-of-duties enforcement.

Vidar's product-security function: the build-time security review gate, secret and vulnerability scanning, and third-party / supply-chain security.

Var's data-protection function: guarding personal data (PII), enforcing user-memory isolation, data classification and retention, and the privacy review gate.