Crown jewels an active attack path reaches, from the internet or inside, where the path carries an open risk story.
Drift (24h)
···
Config-drift stories touched in the last 24 hours, by category and severity. The line is the same count at each daily snapshot.
Active risks
···
Issues the list serves by default, counted at each daily snapshot. Fewer than the tracked risk stories above: the ops-health lane, near-duplicates and hygiene items are left out. The series starts with the first daily snapshot that counts them.
Blast radius
··
Who can reach ··
CONNECTING · governor API
CONNECTING
Fix firstCONNECTING
Ordered by fix leverage: worst band first, then by how many attack paths the fix removes. A lower score can therefore outrank a higher one.