Demo data is simulated for security. No live gate or external actions.

THE MEMBRANE OPERATOR AUDIT
READ ONLY← Home

TRY THE GATE · SIX STEPS

Issue, allow, block, sever, verify.

This is a recorded replay of one real run of the demo, with simulated Jira, Slack and GitHub. Nothing here calls a gate. To run it live, use membrane demo on your machine. The Membrane is early-stage and has a single maintainer.

    Operator view (simulated traffic) ↓

    SECOND VIEW · OPERATOR AUDIT

    OBSERVE. DON'T OVERRIDE.

    Licensed content, gated by license.

    Agents reach game assets, characters, music and footage only within the scope of their license. Everything else is stopped at the gate. Read-only visibility, no write access.

    UNKNOWN

    Starting stream

    THE AUTHORIZATION BOUNDARY

    One gate. Every attempted crossing.

    Six agent identities request licensed assets and try to use them. Calls inside the license scope cross the gate; the rest are stopped at it.

    6 agent identities0 crossed0 stopped at the gate
    Authorization boundary mapSix agent identities request licensed assets and try to use them. Requests inside the license scope cross the membrane to the asset library or the production pipeline. Requests outside it are stopped at the membrane. AGENT IDENTITIESMEMBRANELICENSED CONTENT AUTHORIZATION GATE Agent identitiesart-pipelinelocalizationtrailer-editsoundtrackmerch-conceptfan-content-bot 00 ACCESS · 0 crossedUSE · 0 crossed 0 stopped0 stopped Asset library Production pipeline
    Paths through the membraneSix agent identities request licensed assets and try to use them. Requests inside the license scope cross the membrane. Requests outside it are stopped at the gate. Agent identities010203040506 MEMBRANE · AUTHORIZATION GATE 00 0 stopped0 stopped AssetsPipeline 0 crossed0 crossed

    Waiting for the first decision.

    Calls inside the license scope cross the gate; the rest stop at the boundary.

    Agent stuck

    CLEAR

    No licensed identity denied repeatedly.

    Deny-rate spike

    CLEAR

    Waiting for traffic.

    New identity

    CLEAR

    0 first-seen, 6 known.

    Alerts are computed from this tab’s simulated stream. See the daily readings page (fixed sample data) for what the same alerts look like with a human decision attached.

    Gate liveness

    Unknown

    No checkpoint data

    Decisions retained

    -

    Rolling decision buffer

    Deny rate (last 60s)

    -

    Rolling 60-second window

    Observed since start

    -

    Decisions since page load

    Decision log

    Newest first. Rule codes, not asset contents. Latest 5 shown, 30 retained.

    Time (local)DecisionRule matchedActionGate identity / license scope
    No decisions yet.

    Loaded licenses

    License registry. Configuration stays in files.

    VIEW ONLY
    Source
    Waiting for policy

    The registry is one authorization layer. Signed per-request IAC scopes can restrict it further; this is not a view of every agent's effective permissions.