8 Immune Gates · click any tile to drill into last 100 invocations
Reject Heat-Map · gate × time · last 30 min, 30-second cells
−30 min−20 min−10 minnow
reject intensity:0lowmedhigh
Geographic Threat Origin · reject events by rough geo
Sovereign surface — vanilla JS + inline SVG, no CDN. Fail-CLOSED AND-gate: verdict is PASS only if all 8 gates pass; any gate error ⇒ REJECT.
Every endpoint emits a DSSE-signed Khipu receipt (real ECDSA-P256 cosign when the secret is present; honest UNSIGNED otherwise).
Doctrine v11 LOCKED 749/14/163. The text-heavy operator console remains live at /sentra/inspect.
Endpoints: /api/sentra/v4/exec-summary · /api/sentra/v4/heatmap · /api/sentra/v4/geo · POST /api/sentra/v4/gates/{name}/weight.