TRUSTSTACK
EVIDENCE-DRIVEN CLOUD SECURITY
AWLZ / AWS GOVERNANCE
ORGANIZATION BOUNDARY
MANAGEMENT
OIDC + SCPs
SECURITY
DETECTION
WORKLOADS
GUARDED
PONTOANTICRACK / RESPONSE
PLAN → SNAPSHOT → BREAKER → APPLY
S3 PUBLIC · IAM KEY · SECURITY GROUP
EVIDENCE
PROVENANCE + KUBERNETES
ARTIFACT TRUST TO RUNTIME
SOURCE
GIT
BUILD
SBOM + SCAN
SIGNED
COSIGN
ADMIT
KYVERNO
KATECLUSTERS / RUNTIME
PSA · NETWORK POLICY · FALCO
ADMISSION → OBSERVE → ALERT → PRESERVE
EVIDENCE RAIL
AWS LOGS
CI ATTEST
K8S CAPTURE
DENY PATH
ALLOWED PATH / DENIED PATH / FAILURE BEHAVIOR / PRESERVED EVIDENCE
IN DEVELOPMENT