xchk connections Diagram

Every gated tool call from five harness gates (Claude Code, Codex, Cursor, Hermes, Antigravity: POST /api/agents/authorize); the host manager's census and posture; usage feeds from OpenRouter and OpenAI; hearsay census from MCP, EDR and identity logs
Microsoft AGT approval requests (ADR-0030, POST /api/agt/approval): action digest in, passkey-signed answer and receipt out
Sign-in tokens from Google/Firebase, Microsoft Entra (tenant and subject now ride inside the signed receipt binding), LinkedIn, GitHub, Facebook; Didit KYC verdicts and Stripe payment events by webhook; geo and domain age from ipapi.is, MaxMind, RDAP
Candidates from Ashby and Greenhouse; tickets and proof links from Zendesk; SMS replies via Telnyx; interchange briefs from peer registries when inbound is on; condition feeds (weather.gov, USGS) for standing orders

Findings (refused, held, approved, denied, gate-dropped, omission, revocation, anomaly, test) to ten sinks: signed CloudEvents webhook (HMAC t=,v1=, retries 60s/5m/15m), Slack, Splunk HEC, CrowdStrike NG-SIEM, Datadog, Microsoft Sentinel, Azure Event Hubs, Azure Blob archive, Taegis XDR, ServiceNow
The ask to the owner's phone by FCM push, Telnyx SMS and SES email; the answer is a passkey signature over the ask, never a click
Seal heads to Ravencoin and OpenTimestamps, timestamps from an RFC 3161 TSA; archives to Backblaze B2
TRACE records and a signed revocation bundle for AgenTrust; SSF decision and revocation events to shared-signal receivers; briefs, visas and receipts across the xchk interchange; three questions per act to the intent model API (typesafe.ai)

No prompt or tool output goes to a sink: a finding carries plate, kind, severity, person, a 400-character summary, the record hash and the receipt URL
Nothing we send needs a shared secret to check: receipts and bundles verify offline against the registry's published keys; the signed webhook is verifiable with the published verifier
Intent reading sends the ask and the act, not the conversation; machine text is dropped first

Live on 18–19 Oct 2026: AGT approve and decline on ENG-WNP3, an Entra tenant inside a verified receipt, Ravencoin and OTS anchoring, Telnyx SMS, FCM push, SES email, Slack (notify rail and the findings sink), and the three Azure sinks against Sean's demo subscription: Microsoft Sentinel (Logs Ingestion, 204), Event Hubs (201), Blob archive (201)
Built, awaiting a real receiver: signed webhook (verifier published), Splunk, CrowdStrike, Datadog, ServiceNow (mock receivers in tests); Taegis stays mock-only until a test tenant
Demo-grade: condition feeds and the interview bot that joins Zoom, Teams and Meet

xchk-server at a02fbccfa7 and xchk-app docs/CONNECTORS.md, 18 Oct 2026; outside hosts found by grepping src for https:// origins; each node cites the file that talks to it
Not on this map: the browser pages (see the flow diagram), MongoDB, nginx, pm2