Control-Center v2

Before: Before (c64): framework packs to enable, above a table of hand-built controls→After: After: frameworks drive a catalog of ready-made policies, with posture and open gaps

What changed

The two changes that matter most, in plain words. Open any one to see it.

1. 1

   You choose the frameworks you must meet; the page shows which ready-made policies they need, and you switch those on.

   →Before → after

   Frameworks pick the policies · came from Mark Peterson and Mark Parsonopen →

   See before and after ▸
2. 2

   Each policy has a focused settings page; the egress one lets you approve or block new destinations.

   New in this cycle

   A settings page per policy · came from Mark Parsonopen →

   See it ▸

How we got here

Each change, traced back to the conversation it came from. A solid mark means the record names the source; a dashed one was matched by the draft and waits for review.

Thanks to

People outside Qpoint first. Every thank-you points at something they said or made.

All images

Every picture from this cycle. Click any one to step through them all.

The pairs

Frameworks pick the policiesBefore → after

→

A settings page per policyNew in this cycle

Everything captured · 22

The policy catalog (v1): framework cards, a posture rollup, and policies switched on by togglec65 iteration surface — the policy-catalog framework grid as baseline: kind label dropped, compliance-shield art in place of the kind icon, same live completeness/gap mechanicsPOL-701 — Independent verification that agent connections are governedc65 iteration — Config column dropped; policy rows expand (UxTableListExpandRow) to the underlying rule, full framework mapping with inactive dimmed, severity/remediation, and the config-page linkc65 iteration — direct duplicate of v2 with the config controls inside the expand row: shape components (list editor / threshold / level select / detector list) + Exceptions inline, config dims when the policy is offPolicy Config — Agent Registration — c65 P1 — toggle + exceptions shape, shadow-AI status band, scoped carve-outs with reason + expiryPolicy Config — Credential Protection — c65 P8 — detector-list shape, sensitive-path categories with severity + 24h opensPolicy Config — Data Redaction — c65 P9 — detector-list shape, Secrets + PII/PHI families (the HIPAA/GDPR carrier)