Signpost · evidence
——

What actually happened.

Where the agent looked. What was allowed or blocked. What actually ran.

Observed traversal — origins represented in evidence, in order
no origins touched yet
0
state-change attempts
0
allowed
0
blocked
0
indeterminate
0
provider calls observed
0
results observed

—

Discovery — where can X be performed?

    Authority — is this action authorized to execute?