Skip to main content

Pulse

Pulse Monitoring Office

Security Office

Inspect changes and connected systems for security, privacy, permissions, dependency, configuration, and data-exposure risk.

source:snapshot · Snapshot / Read-onlyLiving Master 2026-08-22 current-state refresh; Atlas Router -> Pulse durable usage intake VERIFIED LIVE (durable row 2026-08-22T03:35:47Z, proof docs/proof/2026-08-22-atlas-pulse-usage-intake-live-001.md); Connect+Runtime COMPLETE; Hub Instantly WORKING / CRM INTENTIONALLY_DISUNKNOWN / SEND PAUSED; Assurance PARTIAL INTAKE_BLOCKED; Atlas Railway cutover still NEEDS_REVERIFY (FW1 NS presence UNKNOWN); SAI landing COMPLETE; Build Truth consume UNKNOWN; Marketplace roadmap WORKING. Observation only - no product rebuild. Snapshot copy is not a live hop. asOf 2026-08-22 12:12 UTC · captured 2026-08-22 12:12 UTC · confidence: nominal.
Phase 1 is seeded only. No scanner is connected. Pulse never executes a security action, fix, or deploy. No SEND. This is a monitoring office, not Hospital / ward / patient.

Feed registry

Communications/watch. pulse-monitoring-registry/v1. connected=false. liveRegistry=NOT_CONFIGURED. publishedTelemetry=STALE_HTML_404 is not live portfolio truth (SNAPSHOT). Not Atlas Router. Not a publishing engine. No SEND. Not Hospital.

  • SNAPSHOTPortfolio snapshot· owner

    source:snapshot. Living Master 2026-08-22 current-state refresh; Atlas Router -> Pulse durable usage intake VERIFIED LIVE (durable row 2026-08-22T03:35:47Z, proof docs/proof/2026-08-22-atlas-pulse-usage-intake-live-001.md); Connect+Runtime COMPLETE; Hub Instantly WORKING / CRM INTENTIONALLY_DISUNKNOWN / SEND PAUSED; Assurance PARTIAL INTAKE_BLOCKED; Atlas Railway cutover still NEEDS_REVERIFY (FW1 NS presence UNKNOWN); SAI landing COMPLETE; Build Truth consume UNKNOWN; Marketplace roadmap WORKING. Observation only - no product rebuild. Snapshot copy is not a live hop. Never treated as live after HTML 404.

  • CODE_READY_UNPUBLISHEDpulse-read/v1 (this tree)· owner

    CODE_READY in this branch. Live hop NOT_CONNECTED until Owner publish. Body stays NOT_CONNECTED.

  • STALE_HTML_404Published pulse-read telemetry· owner

    Published host returns SPA 404 HTML, not JSON. Snapshot is not substituted as live.

  • NOT_CONFIGUREDALL BUILDS live registry· owner

    Live registry adapter is unattached. Status is NOT_CONFIGURED, never CONNECTED.

  • NOT_CONFIGUREDPatient incidents live feed· owner

    No live patient-incident adapter. Snapshot rows are not a live incident bus. NOT_CONFIGURED.

  • NOT_CONFIGUREDAI usage / outcomes· owner

    PULSE_AI_USAGE_PATH → POST /api/public/hooks/atlas-usage: NOT_CONNECTED · Atlas Chat → Router → Pulse: COMPATIBLE · KleinHub Call Box → Router → Pulse: COMPATIBLE Live AI usage adapter is unattached — NOT_CONFIGURED, not CONNECTED.

  • NOT_CONNECTEDFactory / Owner usage+outcome hop· owner

    PLS-004 observe/route envelope. Factory and Owner may GET usage+outcomes. HTTP 200 is not CONNECTED. No SEND. Not Hospital.

  • SNAPSHOTGuardian / security holds· security

    Security Office is seeded observation. /security is the Guardian room. Pulse does not judge or clear holds. Not CONNECTED.

  • NOT_CONNECTEDContent Hub publishing-result envelopes· owner

    LIVE-PULSE-002 observation receiver is code-ready. liveHop NOT_CONNECTED. Pulse observes and routes; it does not own publishing and does not SEND.

  • NOT_CONNECTEDSupport / mail hops· customer

    Mail-evidence liveHop NOT_CONNECTED. Pulse does not SEND.

  • NOT_CONFIGUREDLive Apps feed· owner

    No live Apps adapter attached. Registry stays NOT_CONFIGURED.

  • NOT_CONFIGUREDLive Issues feed· owner

    No live Issues adapter attached. Snapshot incidents are not a live Issues bus. NOT_CONFIGURED.

  • NOT_CONFIGUREDLive Approvals feed· approval

    No live Approvals adapter attached. Pulse does not grant approval. NOT_CONFIGURED.

Observe alerts

Owner, customer, security, and approval attention only. Pulse does not send, approve, or publish.

Responsibilities

  • record seeded security findings
  • classify severity and confidence
  • route protected findings to Guardian
  • route claimed fixes to Audit recheck
  • track remediation and recurrence
  • maintain scanner inventory readiness

Office rules

Read-only · display only

  • Phase 1 is seeded only — no scanner is connected.
  • Security Specialist cannot close a finding without independent Audit verification.
  • Pulse never executes a security action, fix, or deploy.
  • No secret values are ever captured or rendered.

Posture

Seeded display — not a live score and not CONNECTED

Label
Seeded — no scanner connected
connected
false
canExecute
false
Open findings
4 seeded

All findings below are seeded examples. Pulse renders security state read-only and performs no security actions.

Seeded findings

Examples only · route to Guardian / Audit · Pulse does not close

Auth boundary review required for protected route gate

SEC-0001 · kleinhub-main-build · auth-review

HIGH · Guardian Review

Seeded example: protected-route gating must be reviewed before any authenticated surface is added to a lane.

Await Guardian review outcome. Pulse cannot close this finding.

Dependency advisory recheck pending

SEC-0002 · app-builder · dependency-scanning

MEDIUM · Ready for Recheck

Seeded example: a dependency upgrade was claimed complete and is waiting on independent Audit recheck.

Audit recheck queue — independent verification required.

Secret-scanning capability seeded (no scanner connected)

SEC-0004 · all-builds · secret-scanning

INFO · Detected

Seeded capability marker only. No secret values are stored, displayed, or transmitted by Pulse.

Hold for Phase 2 — no scanner connection in Phase 1.

Rollback readiness evidence gap

SEC-0005 · audit-assurance · rollback-readiness

MEDIUM · Needs Evidence

Seeded example: rollback instructions are not yet attached to the release evidence bundle.

Collect rollback evidence; route to Evidence & Audit.

Route queues

Observe and hand off · Pulse does not judge or verify

Guardian security room →

Guardian queue

2

Protected / high-severity seeded findings. Pulse does not clear holds.

Audit recheck queue

1

Claimed fixes wait independent Audit. Pulse does not close findings.

Scanner inventory

Intended tools · none connected

Secret Scanningconnected=false · Seeded
Dependency Scanningconnected=false · Seeded
Static Analysisconnected=false · Seeded
Auth Reviewconnected=false · Seeded
Rls Reviewconnected=false · Seeded
Migration Reviewconnected=false · Seeded
Api Reviewconnected=false · Seeded
Privacy Data Exposureconnected=false · Seeded

Seeded system roles

1 defined roles · not live workers

Full directory →
WorkerRoleKindCapabilityStatusAssignmentEscalation

Security Specialist

Security SpecialistSystemseededAvailable— (seeded, not live)Guardian (protected) · Evidence & Audit (verification)