Full coverage
Expected telemetry received, signatures verified, ingestion within lag budget.
Visibility — Watchtower
Sentinel knows when it has stopped seeing.
Loss of visibility is itself a security event.
Watchtower tracks expected telemetry against received telemetry. A service that goes quiet is not assumed healthy — a coverage gap is raised, scored and worked like any other finding.
Coverage
Expected against received.
Every source carries an expectation of what it should emit and how often. Coverage is the ratio actually observed — stated per source, so a single degraded feed cannot hide behind a healthy average.
axis-7d
100%
axis-core
100%
axis-ark
99%
axis-elite
98%
axis-telesis
64%
cf-workers
100%
cf-access
97%
cf-waf
100%
cf-r2
100%
identity
100%
build
88%
colosseum
100%
Sample coverage. One source below threshold is shown deliberately: that is the state Watchtower exists to surface.
Degraded observation
Signals arriving late or partially. The source is still reporting, but the picture is incomplete and is marked as such.
Blind spot
Expected telemetry not received. Watchtower raises this as a security event — not knowing is itself the finding.
Suppression attempt
Telemetry stopping in a pattern consistent with interference, rather than with an ordinary outage, escalates immediately.