Feature
Probes before collection
Two credential-free probes prove that the pinned env-sync enforces its platform guard before any real collection runs.
The first probe passes an unknown platform name and expects a configuration error. The second passes an empty scope and expects env-sync to refuse a target before any credential read or request.
If either output differs from the pinned contract, the run stops with exit code 3.
More features
All features →- 01
One page for the whole fleet
Every target’s latest state per key, plus the last 20 collector runs, on one read-only page.
- 02
Silence reads as stale
A target with no ok drift snapshot within STALE_AFTER_HOURS is flagged. A dead collector turns every target stale.
- 03
Never a secret value
The database stores 12-character fingerprints, not values. The viewer compares them on the server and sends only the verdict.