Security · Posture

How safe the fleet is — and what to fix first

Fleet posture 76 / 100 against the 80 target (4 pts to go). Highest-leverage fix: fix "No tool-approval policy" on 5 agents = +50 posture. Worst agent: marketing-gpt at 25/100.

Fleet posture score

target ≥ 80

▲ 2 vs last week

mean across 7 instrumented agents

target 80 · 4 pts to go

Critical agents

1/ 8

posture < 50 · highest blast radius

Instrumentation

88%

7 of 8 reporting telemetry

Shadow agents

blind

installed but unmonitored — no telemetry

Fix this first — ranked by leverage

ROI = agents affected × points each

Fix "No tool-approval policy" on 5 agents = +50 posture — the single biggest move available. Clear it and the fleet jumps fastest toward 80.

1.No tool-approval policy · 5 agents × −10

+50

2.Running as root · 2 agents × −25

+50

3.Approvals & sandbox bypassed (yolo) · 1 agent × −35

+35

4.Sandbox disabled · 1 agent × −20

+20

5.Permission checks bypassed · 1 agent × −15

+15

Posture bands

8 agents

Hardened (≥ 80)4

At risk (50–79)3

Critical (< 50)1

Posture index — 6-week trend

projected history · target ≥ 80

Up +18 over 6 weeks (58 → 76). At the recent slope, ~2 more weeks to hit 80.

target 80

−6wnow: 76

Effective posture — pricing the instrumentation gap

shadow agents have no telemetry · their posture is assumed

Reported (instrumented only)

76/ 100

1 shadow agent excluded from this number.

→

Worst case (shadows = Critical)

~69/ 100−7

If unmonitored agents are as bad as our worst, the fleet drops here.

Instrumenting Zed Agent closes a blind spot worth up to 7 points of uncertainty — you can't claim 76 while 1 agent is dark.

Critical & at-risk agents

posture < 80 · lowest first

Agent	Owner	Severity	Governance	Top risk factor	Score
marketing-gpt	root	Critical	ungoverned	Approvals & sandbox bypassed (yolo)	25
Zed Agent shadow	jane	Elevated	ungoverned	No tool-approval policy	60
support-copilot	svc-support@qpoint.io	Elevated	governed	Running as root	65
Codex CLI	dev-7f3@duck.com	Elevated	ungoverned	Sandbox disabled	70

At-rest installations — coverage

4/5 instrumented · 1 unmonitored

Adapter	Version	Executable	Config	Coverage
claude-cli	2.1.161	/Users/mark/.local/bin/claude	present	instrumented
claude-desktop	1.9255.2	/Applications/Claude.app/Contents/MacOS/Claude	present	instrumented
cursor-cli	3.5.17	/Applications/Cursor.app/Contents/MacOS/Cursor	present	instrumented
cursor-desktop	3.5.17	/Applications/Cursor.app/Contents/MacOS/Cursor	present	instrumented
zed	0.229.0	/Applications/Zed.app/Contents/MacOS/zed	present	unmonitored

Do next

Derived: fleetPostureScore · hardeningROI · postureBands · postureIndexTrend · weeksToTarget · shadowAgents — from app/data/c16-fleet.ts (qcontrol /api shape). Score = 100 − Σ FACTOR_PTS deductions.