Your devices

Tier 3 applications can only be reached from an approved, enrolled device (§7.1).

Viewing as Thiri Demo (MOD-P-0900001). Switching personas changes this screen.

Demo controlsPick which posture state to draw. In the product the state comes from the device, never a picker.

This device

Managed laptop · DEV-SYNTH-1001

Attribute of MOD-P-0900001 — a device is never a principal

Meets the Tier 3 baseline

Last evaluated 2 minutes ago.

Demo controlsEvery refusal is its own page now. This screen is where a person fixes what the refusal would not name.
See the refusal for Solid RockOr reach it the way a person would: click a blocked tile on the portal. Pick the reason with the switch on that page.

Design note

This page is the destination; the refusal is not. A block is an interruption — it happens because you clicked something, and it now renders as a sheet over that surface rather than navigating you away from it. Enrolment, “did my fix take”, and the device list are tasks you come here to do. Nothing in FR-08, FR-09 or §7.1 decides that split; it is this prototype's proposal and it is logged as drift.

What this screen still never shows: the posture inventory. NFR-07 permits a compliance verdict, not a hardware and software census, so you see the baseline as a list of requirements and the verdict as a whole — never a per-condition tick sheet against your machine, and never anything about what else is installed on it. is the only tier that turns any of this into a block.

Simulated appStart screenAdmin console