← Bob-Wire · c6

security-section.md

security-section.md

Contents
  1. Expanded Brief
  2. Navigation
  3. Type

The security section is as follows:

/security

  • index page
  • high level overview of policy health
  • policy listing page
    • section : Policies Out of Compliance
    • section : Policies in compliance
    • see PolicyCard documentation page (prototype ../design)
    • Policy detail page: see (prototype ../design)

Expanded Brief

/security (index) — Policy Health Overview

High-level overview of how security policies are performing across all AI agent sessions. Modeled after ../design/app/pages/pages/security-overview.vue adapted to AI agent observability.

Key Sections:

  1. Policy Health summary — overall status:
    • Status: Needs Attention / Healthy
    • e.g., "2 of 4 policies need attention · 4 active violations"
  2. Policy breakdown — one row per policy, showing compliance state:
    • Policy name + severity indicator + compliance % + violation count
    • Visual state: hot (violations) or cool (compliant)
    • Sample:
      • Unknown API Key · High · 0% · 1 violation
      • High Spend Session · Medium · 86% · 3 violations
      • New Agent Type · Low · 100% · 0 violations
      • Rate Limit Guard · Low · 100% · 0 violations
  3. Active violations — table of recent violations across all policies:
    • Columns: Policy, Session, User, Time, Severity
    • 4 rows matching the open violations

/security/policies — Policy Listing

Full policy listing page grouped by compliance state. Reference: ../design/app/pages/pages/policy-listing.vue

Sections:

  1. Stats strip: Total Policies · Active Violations · Sessions Under Policy
  2. Policies Out of Compliance — full-width PolicyCard per policy:
    • Name + version + severity badge
    • Description
    • Three stat columns with sparkline placeholders: Sessions Governed / Compliance % / Violations
    • Sample:
      • Unknown API Key v1 · High · "API key not in org allowlist" · 1 session · 0% · 1 violation
      • High Spend Session v1 · Medium · "Session cost exceeded $10 — org median is $0.84" · 21 sessions · 86% · 3 violations
  3. Policies in Compliance — smaller PolicyCard grid:
    • Name + version + severity badge + sessions + compliance %
    • Sample:
      • New Agent Type v1 · Low · 43 sessions · 100%
      • Rate Limit Guard v1 · Low · 43 sessions · 100%

Card click → policy detail

/security/policies/detail — Policy Detail

Full policy configuration and violation history. Reference: ../design/app/pages/pages/policy-detail.vue

Sample policy: Unknown API Key — detects sessions using keys not in the org allowlist.

Sections:

  1. Policy header — name + version + severity badge + description + 3 stat columns
  2. Rules — sentence-style condition builder:
    • api_key → is not in → org_allowlist
    • Enforcement mode: Monitor vs. Block
  3. Recent Violations — table: Session ID / User / Agent / Time / Action taken (3 rows)
  4. Notifications — alert rule blocks: condition + destination (webhook / slack)

DashCategoryNav security section:

  • Overview → /c6/wireframes/dashboard-v1/security
  • Policies → /c6/wireframes/dashboard-v1/security/policies

Type

wireframe

Qpoint Brand Style Guide