[{"data":1,"prerenderedAt":941},["ShallowReactive",2],{"cycle-doc-bob-wire-c9-plan.md":3},{"cycle":4,"project":7,"path":10,"title":11,"toc":12,"ast":21},{"id":5,"title":6},"c9","Meaning-Layer Dashboard",{"id":8,"label":9},"bob-wire","Bob-Wire","plan.md","c9 Plan — Meaning Before Data",[13,14,15,16,17,18,19,20],"Context","Design Premise","High-Level Workstreams","Research Tracks","Most Critical Signals To Amplify","Page Strategy","Deliverable Shape","Build Order",{"type":22,"children":23},"root",[24,32,53,63,96,101,106,111,139,144,149,156,161,184,197,209,232,238,243,286,292,297,340,346,351,380,385,390,396,401,419,424,437,443,447,465,469,482,488,492,510,514,527,533,537,555,559,572,577,620,625,630,635,658,663,676,682,686,704,708,716,722,727,750,756,761,779,785,790,808,813,818,841,846,877,882],{"type":25,"tag":26,"props":27,"children":29},"element","h2",{"id":28},"context",[30],{"type":31,"value":13},"text",{"type":25,"tag":33,"props":34,"children":35},"p",{},[36,43,45,51],{"type":25,"tag":37,"props":38,"children":40},"code",{"className":39},[],[41],{"type":31,"value":42},"c6",{"type":31,"value":44}," proved the dashboard structure and the full inventory model. ",{"type":25,"tag":37,"props":46,"children":48},{"className":47},[],[49],{"type":31,"value":50},"c8",{"type":31,"value":52}," expanded bob-wire's ability to sketch richer relationship and abstraction patterns.",{"type":25,"tag":33,"props":54,"children":55},{},[56,61],{"type":25,"tag":37,"props":57,"children":59},{"className":58},[],[60],{"type":31,"value":5},{"type":31,"value":62}," builds on both:",{"type":25,"tag":64,"props":65,"children":66},"ul",{},[67,80,91],{"type":25,"tag":68,"props":69,"children":70},"li",{},[71,73,78],{"type":31,"value":72},"use ",{"type":25,"tag":37,"props":74,"children":76},{"className":75},[],[77],{"type":31,"value":42},{"type":31,"value":79}," as the baseline dashboard",{"type":25,"tag":68,"props":81,"children":82},{},[83,84,89],{"type":31,"value":72},{"type":25,"tag":37,"props":85,"children":87},{"className":86},[],[88],{"type":31,"value":50},{"type":31,"value":90}," as the expressive grammar",{"type":25,"tag":68,"props":92,"children":93},{},[94],{"type":31,"value":95},"redesign the wireframe experience around significance, posture, evidence, and next-step clarity",{"type":25,"tag":26,"props":97,"children":99},{"id":98},"design-premise",[100],{"type":31,"value":14},{"type":25,"tag":33,"props":102,"children":103},{},[104],{"type":31,"value":105},"The dashboard is not only a place to inspect data. It is a place to understand whether something is normal, risky, unclear, or urgent.",{"type":25,"tag":33,"props":107,"children":108},{},[109],{"type":31,"value":110},"The top of a page should answer:",{"type":25,"tag":64,"props":112,"children":113},{},[114,119,124,129,134],{"type":25,"tag":68,"props":115,"children":116},{},[117],{"type":31,"value":118},"what matters",{"type":25,"tag":68,"props":120,"children":121},{},[122],{"type":31,"value":123},"why it surfaced",{"type":25,"tag":68,"props":125,"children":126},{},[127],{"type":31,"value":128},"how confident we are",{"type":25,"tag":68,"props":130,"children":131},{},[132],{"type":31,"value":133},"what its blast radius might be",{"type":25,"tag":68,"props":135,"children":136},{},[137],{"type":31,"value":138},"where to drill next",{"type":25,"tag":33,"props":140,"children":141},{},[142],{"type":31,"value":143},"The raw data table should still exist, but later in the page and with clearer framing.",{"type":25,"tag":26,"props":145,"children":147},{"id":146},"high-level-workstreams",[148],{"type":31,"value":15},{"type":25,"tag":150,"props":151,"children":153},"h3",{"id":152},"_1-security-operator-research-lens",[154],{"type":31,"value":155},"1. Security operator research lens",{"type":25,"tag":33,"props":157,"children":158},{},[159],{"type":31,"value":160},"Frame every redesign decision around the security operator's mental model:",{"type":25,"tag":64,"props":162,"children":163},{},[164,169,174,179],{"type":25,"tag":68,"props":165,"children":166},{},[167],{"type":31,"value":168},"10-second question: what demands attention?",{"type":25,"tag":68,"props":170,"children":171},{},[172],{"type":31,"value":173},"60-second question: why is it concerning?",{"type":25,"tag":68,"props":175,"children":176},{},[177],{"type":31,"value":178},"5-minute question: what evidence supports that?",{"type":25,"tag":68,"props":180,"children":181},{},[182],{"type":31,"value":183},"15-minute question: what action should follow?",{"type":25,"tag":150,"props":185,"children":187},{"id":186},"_2-c6-audit",[188,190,195],{"type":31,"value":189},"2. ",{"type":25,"tag":37,"props":191,"children":193},{"className":192},[],[194],{"type":31,"value":42},{"type":31,"value":196}," audit",{"type":25,"tag":33,"props":198,"children":199},{},[200,202,207],{"type":31,"value":201},"Review the ",{"type":25,"tag":37,"props":203,"children":205},{"className":204},[],[206],{"type":31,"value":42},{"type":31,"value":208}," wireframes and identify where they are:",{"type":25,"tag":64,"props":210,"children":211},{},[212,217,222,227],{"type":25,"tag":68,"props":213,"children":214},{},[215],{"type":31,"value":216},"data-rich but meaning-thin",{"type":25,"tag":68,"props":218,"children":219},{},[220],{"type":31,"value":221},"visually dense before significance is established",{"type":25,"tag":68,"props":223,"children":224},{},[225],{"type":31,"value":226},"table-led when a pattern summary would be better",{"type":25,"tag":68,"props":228,"children":229},{},[230],{"type":31,"value":231},"missing confidence, novelty, comparison, or blast-radius cues",{"type":25,"tag":150,"props":233,"children":235},{"id":234},"_3-signal-taxonomy",[236],{"type":31,"value":237},"3. Signal taxonomy",{"type":25,"tag":33,"props":239,"children":240},{},[241],{"type":31,"value":242},"Define the signals that deserve elevation above raw rows:",{"type":25,"tag":64,"props":244,"children":245},{},[246,251,256,261,266,271,276,281],{"type":25,"tag":68,"props":247,"children":248},{},[249],{"type":31,"value":250},"unknown",{"type":25,"tag":68,"props":252,"children":253},{},[254],{"type":31,"value":255},"new",{"type":25,"tag":68,"props":257,"children":258},{},[259],{"type":31,"value":260},"unusual",{"type":25,"tag":68,"props":262,"children":263},{},[264],{"type":31,"value":265},"sensitive",{"type":25,"tag":68,"props":267,"children":268},{},[269],{"type":31,"value":270},"concentrated",{"type":25,"tag":68,"props":272,"children":273},{},[274],{"type":31,"value":275},"unstable",{"type":25,"tag":68,"props":277,"children":278},{},[279],{"type":31,"value":280},"spreading",{"type":25,"tag":68,"props":282,"children":283},{},[284],{"type":31,"value":285},"low-confidence",{"type":25,"tag":150,"props":287,"children":289},{"id":288},"_4-meaning-layer-patterns",[290],{"type":31,"value":291},"4. Meaning-layer patterns",{"type":25,"tag":33,"props":293,"children":294},{},[295],{"type":31,"value":296},"Establish reusable page patterns such as:",{"type":25,"tag":64,"props":298,"children":299},{},[300,305,310,315,320,325,330,335],{"type":25,"tag":68,"props":301,"children":302},{},[303],{"type":31,"value":304},"posture banner",{"type":25,"tag":68,"props":306,"children":307},{},[308],{"type":31,"value":309},"threat bundle",{"type":25,"tag":68,"props":311,"children":312},{},[313],{"type":31,"value":314},"relationship spotlight",{"type":25,"tag":68,"props":316,"children":317},{},[318],{"type":31,"value":319},"change since last seen",{"type":25,"tag":68,"props":321,"children":322},{},[323],{"type":31,"value":324},"reason surfaced",{"type":25,"tag":68,"props":326,"children":327},{},[328],{"type":31,"value":329},"confidence marker",{"type":25,"tag":68,"props":331,"children":332},{},[333],{"type":31,"value":334},"blast-radius summary",{"type":25,"tag":68,"props":336,"children":337},{},[338],{"type":31,"value":339},"suggested next inspection",{"type":25,"tag":150,"props":341,"children":343},{"id":342},"_5-proving-ground-wireframes",[344],{"type":31,"value":345},"5. Proving-ground wireframes",{"type":25,"tag":33,"props":347,"children":348},{},[349],{"type":31,"value":350},"Redesign five pages first:",{"type":25,"tag":352,"props":353,"children":354},"ol",{},[355,360,365,370,375],{"type":25,"tag":68,"props":356,"children":357},{},[358],{"type":31,"value":359},"Home",{"type":25,"tag":68,"props":361,"children":362},{},[363],{"type":31,"value":364},"Security overview",{"type":25,"tag":68,"props":366,"children":367},{},[368],{"type":31,"value":369},"Inventory overview",{"type":25,"tag":68,"props":371,"children":372},{},[373],{"type":31,"value":374},"Sessions index",{"type":25,"tag":68,"props":376,"children":377},{},[378],{"type":31,"value":379},"API keys index",{"type":25,"tag":33,"props":381,"children":382},{},[383],{"type":31,"value":384},"These pages will test whether the meaning layer is understandable without redesigning the entire dashboard at once.",{"type":25,"tag":26,"props":386,"children":388},{"id":387},"research-tracks",[389],{"type":31,"value":16},{"type":25,"tag":150,"props":391,"children":393},{"id":392},"track-a-what-security-actually-cares-about",[394],{"type":31,"value":395},"Track A — What security actually cares about",{"type":25,"tag":33,"props":397,"children":398},{},[399],{"type":31,"value":400},"Questions:",{"type":25,"tag":64,"props":402,"children":403},{},[404,409,414],{"type":25,"tag":68,"props":405,"children":406},{},[407],{"type":31,"value":408},"Which unknowns change the posture of the whole page?",{"type":25,"tag":68,"props":410,"children":411},{},[412],{"type":31,"value":413},"What kinds of change deserve elevation even without explicit policy violations?",{"type":25,"tag":68,"props":415,"children":416},{},[417],{"type":31,"value":418},"What combinations of signals indicate likely risk vs benign novelty?",{"type":25,"tag":33,"props":420,"children":421},{},[422],{"type":31,"value":423},"Output:",{"type":25,"tag":64,"props":425,"children":426},{},[427,432],{"type":25,"tag":68,"props":428,"children":429},{},[430],{"type":31,"value":431},"prioritized list of operator questions",{"type":25,"tag":68,"props":433,"children":434},{},[435],{"type":31,"value":436},"mapping of questions to page patterns",{"type":25,"tag":150,"props":438,"children":440},{"id":439},"track-b-showing-meaning-instead-of-only-evidence",[441],{"type":31,"value":442},"Track B — Showing meaning instead of only evidence",{"type":25,"tag":33,"props":444,"children":445},{},[446],{"type":31,"value":400},{"type":25,"tag":64,"props":448,"children":449},{},[450,455,460],{"type":25,"tag":68,"props":451,"children":452},{},[453],{"type":31,"value":454},"How can a page summarize the issue before exposing the full evidence set?",{"type":25,"tag":68,"props":456,"children":457},{},[458],{"type":31,"value":459},"How do we present \"normal vs unusual\" in a way that feels obvious?",{"type":25,"tag":68,"props":461,"children":462},{},[463],{"type":31,"value":464},"Which comparisons are most meaningful: peer, historical, or policy-based?",{"type":25,"tag":33,"props":466,"children":467},{},[468],{"type":31,"value":423},{"type":25,"tag":64,"props":470,"children":471},{},[472,477],{"type":25,"tag":68,"props":473,"children":474},{},[475],{"type":31,"value":476},"summary pattern options",{"type":25,"tag":68,"props":478,"children":479},{},[480],{"type":31,"value":481},"comparison heuristics",{"type":25,"tag":150,"props":483,"children":485},{"id":484},"track-c-noise-reduction",[486],{"type":31,"value":487},"Track C — Noise reduction",{"type":25,"tag":33,"props":489,"children":490},{},[491],{"type":31,"value":400},{"type":25,"tag":64,"props":493,"children":494},{},[495,500,505],{"type":25,"tag":68,"props":496,"children":497},{},[498],{"type":31,"value":499},"Which stable and expected signals should collapse into summaries?",{"type":25,"tag":68,"props":501,"children":502},{},[503],{"type":31,"value":504},"Which tables should move lower on the page?",{"type":25,"tag":68,"props":506,"children":507},{},[508],{"type":31,"value":509},"Which repeated fields should become tags, legends, or annotations rather than columns?",{"type":25,"tag":33,"props":511,"children":512},{},[513],{"type":31,"value":423},{"type":25,"tag":64,"props":515,"children":516},{},[517,522],{"type":25,"tag":68,"props":518,"children":519},{},[520],{"type":31,"value":521},"de-emphasis rules",{"type":25,"tag":68,"props":523,"children":524},{},[525],{"type":31,"value":526},"page simplification checklist",{"type":25,"tag":150,"props":528,"children":530},{"id":529},"track-d-signal-amplification",[531],{"type":31,"value":532},"Track D — Signal amplification",{"type":25,"tag":33,"props":534,"children":535},{},[536],{"type":31,"value":400},{"type":25,"tag":64,"props":538,"children":539},{},[540,545,550],{"type":25,"tag":68,"props":541,"children":542},{},[543],{"type":31,"value":544},"Which signals should always appear above the fold?",{"type":25,"tag":68,"props":546,"children":547},{},[548],{"type":31,"value":549},"How do we show multi-entity relationships as one coherent threat?",{"type":25,"tag":68,"props":551,"children":552},{},[553],{"type":31,"value":554},"What is the smallest useful evidence bundle?",{"type":25,"tag":33,"props":556,"children":557},{},[558],{"type":31,"value":423},{"type":25,"tag":64,"props":560,"children":561},{},[562,567],{"type":25,"tag":68,"props":563,"children":564},{},[565],{"type":31,"value":566},"top-signal hierarchy",{"type":25,"tag":68,"props":568,"children":569},{},[570],{"type":31,"value":571},"evidence bundle templates",{"type":25,"tag":26,"props":573,"children":575},{"id":574},"most-critical-signals-to-amplify",[576],{"type":31,"value":17},{"type":25,"tag":352,"props":578,"children":579},{},[580,585,590,595,600,605,610,615],{"type":25,"tag":68,"props":581,"children":582},{},[583],{"type":31,"value":584},"Unknown credential in active use",{"type":25,"tag":68,"props":586,"children":587},{},[588],{"type":31,"value":589},"Unknown user or unresolved endpoint attached to live activity",{"type":25,"tag":68,"props":591,"children":592},{},[593],{"type":31,"value":594},"Sensitive file access in a currently active or recently ended session",{"type":25,"tag":68,"props":596,"children":597},{},[598],{"type":31,"value":599},"New outbound destination, especially unencrypted or rare",{"type":25,"tag":68,"props":601,"children":602},{},[603],{"type":31,"value":604},"Known identities behaving in new combinations",{"type":25,"tag":68,"props":606,"children":607},{},[608],{"type":31,"value":609},"Concentrated spend or activity on a single model, key, or session",{"type":25,"tag":68,"props":611,"children":612},{},[613],{"type":31,"value":614},"Capability or MCP error spikes that may indicate degraded trust or instability",{"type":25,"tag":68,"props":616,"children":617},{},[618],{"type":31,"value":619},"Low-confidence attribution where security decisions still need to be made",{"type":25,"tag":26,"props":621,"children":623},{"id":622},"page-strategy",[624],{"type":31,"value":18},{"type":25,"tag":150,"props":626,"children":628},{"id":627},"home",[629],{"type":31,"value":359},{"type":25,"tag":33,"props":631,"children":632},{},[633],{"type":31,"value":634},"Lead with:",{"type":25,"tag":64,"props":636,"children":637},{},[638,643,648,653],{"type":25,"tag":68,"props":639,"children":640},{},[641],{"type":31,"value":642},"top risks now",{"type":25,"tag":68,"props":644,"children":645},{},[646],{"type":31,"value":647},"what changed since yesterday",{"type":25,"tag":68,"props":649,"children":650},{},[651],{"type":31,"value":652},"stable vs unstable zones",{"type":25,"tag":68,"props":654,"children":655},{},[656],{"type":31,"value":657},"recommended next drill",{"type":25,"tag":33,"props":659,"children":660},{},[661],{"type":31,"value":662},"Reduce:",{"type":25,"tag":64,"props":664,"children":665},{},[666,671],{"type":25,"tag":68,"props":667,"children":668},{},[669],{"type":31,"value":670},"pure KPI emphasis",{"type":25,"tag":68,"props":672,"children":673},{},[674],{"type":31,"value":675},"broad inventory count scanning as the main job",{"type":25,"tag":150,"props":677,"children":679},{"id":678},"security-overview",[680],{"type":31,"value":681},"Security Overview",{"type":25,"tag":33,"props":683,"children":684},{},[685],{"type":31,"value":634},{"type":25,"tag":64,"props":687,"children":688},{},[689,694,699],{"type":25,"tag":68,"props":690,"children":691},{},[692],{"type":31,"value":693},"active concerns grouped by significance",{"type":25,"tag":68,"props":695,"children":696},{},[697],{"type":31,"value":698},"why each concern matters",{"type":25,"tag":68,"props":700,"children":701},{},[702],{"type":31,"value":703},"confidence and blast radius",{"type":25,"tag":33,"props":705,"children":706},{},[707],{"type":31,"value":662},{"type":25,"tag":64,"props":709,"children":710},{},[711],{"type":25,"tag":68,"props":712,"children":713},{},[714],{"type":31,"value":715},"simple lists of issues without interpretation",{"type":25,"tag":150,"props":717,"children":719},{"id":718},"inventory-overview",[720],{"type":31,"value":721},"Inventory Overview",{"type":25,"tag":33,"props":723,"children":724},{},[725],{"type":31,"value":726},"Lead with meaning buckets instead of entity buckets:",{"type":25,"tag":64,"props":728,"children":729},{},[730,735,740,745],{"type":25,"tag":68,"props":731,"children":732},{},[733],{"type":31,"value":734},"unknowns",{"type":25,"tag":68,"props":736,"children":737},{},[738],{"type":31,"value":739},"sensitive touchpoints",{"type":25,"tag":68,"props":741,"children":742},{},[743],{"type":31,"value":744},"active exposures",{"type":25,"tag":68,"props":746,"children":747},{},[748],{"type":31,"value":749},"new entities and new combinations",{"type":25,"tag":150,"props":751,"children":753},{"id":752},"sessions-index",[754],{"type":31,"value":755},"Sessions Index",{"type":25,"tag":33,"props":757,"children":758},{},[759],{"type":31,"value":760},"Lead with significance summaries:",{"type":25,"tag":64,"props":762,"children":763},{},[764,769,774],{"type":25,"tag":68,"props":765,"children":766},{},[767],{"type":31,"value":768},"sessions needing review",{"type":25,"tag":68,"props":770,"children":771},{},[772],{"type":31,"value":773},"sessions normal by pattern",{"type":25,"tag":68,"props":775,"children":776},{},[777],{"type":31,"value":778},"sessions unusual by cost, access, or destination behavior",{"type":25,"tag":150,"props":780,"children":782},{"id":781},"api-keys-index",[783],{"type":31,"value":784},"API Keys Index",{"type":25,"tag":33,"props":786,"children":787},{},[788],{"type":31,"value":789},"Lead with credential trust posture:",{"type":25,"tag":64,"props":791,"children":792},{},[793,798,803],{"type":25,"tag":68,"props":794,"children":795},{},[796],{"type":31,"value":797},"known vs unknown",{"type":25,"tag":68,"props":799,"children":800},{},[801],{"type":31,"value":802},"active risky credentials",{"type":25,"tag":68,"props":804,"children":805},{},[806],{"type":31,"value":807},"keys by blast radius and unusual use",{"type":25,"tag":26,"props":809,"children":811},{"id":810},"deliverable-shape",[812],{"type":31,"value":19},{"type":25,"tag":33,"props":814,"children":815},{},[816],{"type":31,"value":817},"This cycle should produce:",{"type":25,"tag":64,"props":819,"children":820},{},[821,826,831,836],{"type":25,"tag":68,"props":822,"children":823},{},[824],{"type":31,"value":825},"a redesign thesis",{"type":25,"tag":68,"props":827,"children":828},{},[829],{"type":31,"value":830},"a reusable signal taxonomy",{"type":25,"tag":68,"props":832,"children":833},{},[834],{"type":31,"value":835},"a first brief set",{"type":25,"tag":68,"props":837,"children":838},{},[839],{"type":31,"value":840},"a small number of high-value comparison wireframes",{"type":25,"tag":33,"props":842,"children":843},{},[844],{"type":31,"value":845},"The comparison should make it easy to answer:",{"type":25,"tag":64,"props":847,"children":848},{},[849,861,872],{"type":25,"tag":68,"props":850,"children":851},{},[852,854,859],{"type":31,"value":853},"what ",{"type":25,"tag":37,"props":855,"children":857},{"className":856},[],[858],{"type":31,"value":42},{"type":31,"value":860}," shows",{"type":25,"tag":68,"props":862,"children":863},{},[864,865,870],{"type":31,"value":853},{"type":25,"tag":37,"props":866,"children":868},{"className":867},[],[869],{"type":31,"value":5},{"type":31,"value":871}," adds",{"type":25,"tag":68,"props":873,"children":874},{},[875],{"type":31,"value":876},"whether the added abstraction helps or confuses",{"type":25,"tag":26,"props":878,"children":880},{"id":879},"build-order",[881],{"type":31,"value":20},{"type":25,"tag":352,"props":883,"children":884},{},[885,890,902,914,919,936],{"type":25,"tag":68,"props":886,"children":887},{},[888],{"type":31,"value":889},"Finalize c9 docs and brief set",{"type":25,"tag":68,"props":891,"children":892},{},[893,895,900],{"type":31,"value":894},"Audit ",{"type":25,"tag":37,"props":896,"children":898},{"className":897},[],[899],{"type":31,"value":42},{"type":31,"value":901}," pages against the taxonomy",{"type":25,"tag":68,"props":903,"children":904},{},[905,907,912],{"type":31,"value":906},"Create ",{"type":25,"tag":37,"props":908,"children":910},{"className":909},[],[911],{"type":31,"value":5},{"type":31,"value":913}," gallery scaffold",{"type":25,"tag":68,"props":915,"children":916},{},[917],{"type":31,"value":918},"Build the five proving-ground wireframes",{"type":25,"tag":68,"props":920,"children":921},{},[922,924,929,931],{"type":31,"value":923},"Compare ",{"type":25,"tag":37,"props":925,"children":927},{"className":926},[],[928],{"type":31,"value":42},{"type":31,"value":930}," vs ",{"type":25,"tag":37,"props":932,"children":934},{"className":933},[],[935],{"type":31,"value":5},{"type":25,"tag":68,"props":937,"children":938},{},[939],{"type":31,"value":940},"Decide whether to expand to more inventory pages",1794599429280]