Evidence before certainty.
Phigon keeps authorization, machine identity, process identity, and attribution evidence separate so uncertainty remains visible.
Fail-closed production access
Production requires organization-backed authentication. Local static sessions are rejected by production configuration and readiness checks.
Tenant isolation
Machine, credential, audit, consent, telemetry, and deletion operations are scoped to an authoritative tenant identity.
Independent evidence records
Agent-native, operating-system-native, and gateway claims are retained independently. Conflicts and coverage loss override positive attribution.
Browser and cluster boundaries
The dashboard applies a strict content policy, anti-framing and transport headers, TLS-only ingress, and restricted network paths.