CEDX 2026 Kernel Release: Single-tenant isolation, canonical Postgres schema, workflow bus, and immutable audit trail Explore the CEDX Audit architecture ->
CEDXSystems
EnglishTalk to sales
PLATFORM & IDENTITY CEDX Audit
Overview Risk Events Workflow & Tour Operators TCO Model 14-Day Sandbox Live build ↗
PLATFORM & IDENTITY CEDX Audit · Platform · audit.cedxsystems.com

An audit trail that audits itself first.

Three hundred twenty events in the demo stream, and the console's first job is grading its own coverage: 6 of 24 sources passing validation, a digest chain at 72% integrity, and 15 retention gaps, because a trail with holes in it is worse than no trail at all.

Open live CEDX Audit -> Inspect 4-screen build tour
320 events in the stream 65 failures 19 high-risk findings Zero-ETL Shared Postgres Record
CEDX Audit Enterprise Architecture Briefing
CEDX Audit · 320 events in the stream

"Our operators actually enjoy opening the workspace. Every screen is fast, legible, and grounded in live production dat..."

David Okafor · VP of Enterprise Systems · Harbor Holdings · 0.01s Canonical Sync
CEDX Audit reads and writes the exact same canonical Postgres record as CEDX Identity, CEDX Admin, and CEDX Directory with zero third-party webhooks.
🔒 https://audit.cedxsystems.com/workspace/live
CEDX Audit · Overview (Assurance health at 47, and why)
audit.cedxsystems.com · 01 Overview · Live Canonical Dataset
● Overview Active · 0.011s Sync Open /app/audit ↗
EVENTS IN THE STREAM
320
7 days · 124 admin-class
FAILURES
65
failure + deny · 25 policy-blocked
HIGH-RISK FINDINGS
19
10 anomaly · 9 retention
INTEGRITY PASS
72%
digest chain, on screen
Platform Subsystem / Node Canonical Schema Binding Tenant & RBAC Scope Throughput / Event Rate Cryptographic Audit SLA Availability
Canonical Entity Graph v26.4CEDX Audit · Record #1040 132 Apps · Shared Primary Keys Global Multi-Entity Root 48.2M Events / Day ● SHA-256 Chain Verified 99.995% Uptime
Workflow Deterministic BusCEDX Audit · Record #1041 Cross-App Triggers (CRM->Books) Zero-Middleware Execution 1,840 Workflows / Min ● Idempotent Replay Log 0.012s p99
Enterprise Directory & RBACCEDX Audit · Record #1042 418 Principals · 38 Roles SCIM + SAML + Passkeys Zero Standing Drift ● Every Grant Priced 100% Enforced
Immutable Compliance LedgerCEDX Audit · Record #1043 SOC-2 / ISO / GDPR Evidence Tamper-Evident Storage 100% Write Coverage ● Auditor Read-Only View Verified Live
✦ CEDX Audit Copilot · Canonical Entity Graph v26.4
Overview Verified
The assurance score is deliberately uncomfortable: integrity at 72%, only 6 of 24 sources healthy, 19 high-risk findings. The alerts are root-caused: an off-hours burst of 9 admin-class events in 74 minutes, a break-glass account assigned without a ticket, a digest window missing for two hours.
CEDX Audit operator workspace in natural daylight
FIELD DOCUMENTARY · PLATFORM & IDENTITY

Every event, typed and resulted

The finding that writes the page: the identity production log retains 45 days against a 90-day compliance floor. Nobody tampered with anything. The trail just quietly stopped keeping what it should.

CAMERA: CANON EOS R5 · 35MM F/1.4 · NATURAL DAYLIGHT ESTATE ROUTE: /APP/AUDIT
CORE CAPABILITIES · CEDX AUDIT

Three architectural jobs CEDX Audit gets right on one record.

Every capability below runs against the shared CEDX Postgres database with zero external sync queues or reconciliation lag.

01 · PLATFORM & IDENTITY FOUNDATION

Every event, typed and resulted

The event stream carries time, actor, action, target and result on all 320 rows: role assumes, policy updates, secret creates, lifecycle changes, with Success, Failure and Deny as filter chips. The 25 policy-blocked denies are counted separately, because a deny is the system working, not an error.

✓ 320 rows searchable by actor, action, target, sourceVerified
✓ 65 failures = failure + deny, split on the headerVerified
✓ Actions from device.enroll to trail.retention.updateVerified
02 · LIVE EXECUTION

Risk scored, board by board

The Risk screen splits 72 rows into anomaly trails and retention risk, each with kind, actor, source, severity and score. Under-retained sources top the board at 89; impossible travel and off-hours bursts score in the 60s. The scoring model is a tab, not a secret.

Risk scored, board by board
CEDX Audit Live Telemetry ● 320 events in the stream
03 · DETERMINISTIC GOVERNANCE

Actors profiled, break-glass counted

Ninety-six actors (human, service, break-glass, automation) with events, fails, risk and last seen per row. An automation at 8 events and 8 fails scores 93; the break-glass accounts are their own filter chip, because emergency access deserves its own list.

✓ 96 actors: 40 elevated, 30 high riskActive
✓ Average fail rate 33% across actorsActive
✓ Human · Service · Break-glass · Automation chipsActive
04 · VERIFIED DEMO DATASET METRICS

What the live CEDX Audit build looks like when you open /app/audit.

Every figure below is directly inspectable in the running CEDX Audit application workspace with zero synthetic projections.

EVENTS IN THE STREAM
320
7 days · 124 admin-class
FAILURES
65
failure + deny · 25 policy-blocked
HIGH-RISK FINDINGS
19
10 anomaly · 9 retention
INTEGRITY PASS
72%
digest chain, on screen
4-SCREEN RUNNING BUILD TOUR

Four screens captured from audit.cedxsystems.com, in the order operators run them.

Click any screen below to inspect how CEDX Audit moves from initial intake to verified cross-estate completion.

01 OVERVIEW
Assurance health at 47, and why
The assurance score is deliberately uncomfortable: integrity at 72%, only 6 of 24 sources healthy, 19 high-risk findings. The alerts are root-caused: an off-hours burst of 9 admin-class events in 74 minutes, a break-glass account assigned without a ticket, a digest window missing for two hours.
02 RISK
The board, anomaly against retention
Seventy-two findings where the two failure modes sit side by side: things that happened and should not have, and records that should exist and do not. Filters at 55 and 70 turn the board into a work queue.
03 EVENTS
The stream, row by row
Time to the second, actor, action, target, result. A secret create that failed sits two rows from a role assume that succeeded. The stream does not separate the good days from the bad ones, it just keeps both.
04 ACTORS
Who did what, humans and otherwise
The actor table makes non-human activity visible: automations with perfect failure records, service accounts with elevated paths, break-glass principals with their own chip. Risk is scored per actor, and last-seen dates the row.
01 OVERVIEW · AUDIT.CEDXSYSTEMS.COM

Assurance health at 47, and why

● Live Screen Capture

The assurance score is deliberately uncomfortable: integrity at 72%, only 6 of 24 sources healthy, 19 high-risk findings. The alerts are root-caused: an off-hours burst of 9 admin-class events in 74 minutes, a break-glass account assigned without a ticket, a digest window missing for two hours.

✓ Severity mix: 135 info, 86 notice, 55 warning, 44 errorVerified in /app/audit
✓ Sources by kind: SaaS 6, endpoint 5, cloud API 4 and moreVerified in /app/audit
✓ High-score anomalies listed with actor and scoreVerified in /app/audit
Assurance health at 47, and why
OPERATING CADENCE · PLATFORM & IDENTITY

How CEDX Audit runs across the week, in the exact order work happens.

Platform governance is not bolted on after purchase: Admin, Directory, Workflow, Audit, and Vault form the substrate every CEDX app compiles against.

STAGE 01

Capture & Ingest

Records land in CEDX Audit already linked to the canonical customer, employee, or vendor ID.

STAGE 02

Score & Triage

Deterministic rules and auditable Copilot signals rank every item by financial and SLA impact.

STAGE 03

Execute & Approve

Operators resolve work in one click with role-based guardrails and instant cross-app writeback.

STAGE 04

Reconcile & Report

Every completed action updates live executive dashboards and the immutable audit log automatically.

OPERATOR WORKSPACES · WHO RUNS CEDX AUDIT

Three roles open CEDX Audit every day. Each sees the exact surface they own.

Role-based views and permissions are enforced at the database row level so executives, managers, and frontline operators share one source of truth.

Compliance using CEDX Audit

Compliance

Owns the retention board: 15 gaps against the floor, the identity log 45 days short of 90, and the assurance score they report upward.

● retention gaps · 15
Security review using CEDX Audit

Security review

Owns the anomaly board (19 high-risk findings, the off-hours burst, the break-glass assignment without a ticket) and the review that follows.

● high risk · 19
Platform engineering using CEDX Audit

Platform engineering

Owns source coverage: 24 sources, 6 passing validation, and the digest windows that went missing for two hours.

● sources healthy · 6/24
ONE CANONICAL RECORD ACROSS 132 APPLICATIONS

One Identity, One Data Model, One Permission Graph Under Every Application

CEDX Audit is not an isolated point tool. It reads and writes the exact same customer, ledger, and identity records as the rest of the CEDX software estate.

CONNECTED MODULE 01 Open /identity/ ->

CEDX Identity

Sign-ins, role assumes and policy updates are the identity events in this stream; 124 admin-class events in the demo week came from somewhere.
CONNECTED MODULE 02 Open /admin/ ->

CEDX Admin

Seat grants, role edits and workspace changes are admin-class events; the off-hours burst alert is exactly this traffic.
CONNECTED MODULE 03 Open /directory/ ->

CEDX Directory

Lifecycle events (joins, moves, leaves) are the directory's contribution to the stream, and leavers past SLA show up in both consoles.
CONNECTED MODULE 04 Open /siem/ ->

CEDX Siem

The scored anomalies and actor risk profiles here are the signals a security operations view correlates further.
ARCHITECTURAL PROOF · OPERATOR PERSPECTIVES

Why enterprise operators replace stitched SaaS stacks with CEDX Audit.

"Our operators actually enjoy opening the workspace. Every screen is fast, legible, and grounded in live production data with zero synthetic clutter."

David Okafor
David Okafor
VP of Enterprise Systems · Harbor Holdings

"Having identity, least-privilege access, audit trails, and business applications on one kernel cut our security review and provisioning time by 82%."

Sarah Lindqvist
Sarah Lindqvist
Chief Information Security Officer · Atlas Corp

"We started with one application to fix our most painful bottleneck, and added five more modules on the same login without a single migration project."

Arjun Patel
Arjun Patel
SVP of Global Operations · Keystone Logistics
LIVE TCO & CONSOLIDATION MODEL · PLATFORM & IDENTITY

Stop paying five vendors to re-sync the same platform & identity record.

Drag the seat slider to compare your current stitched stack (Okta Workforce + Workato + MuleSoft + Vanta + Splunk Audit) against running CEDX Audit natively on the unified CEDX estate.

Organization Seats 250 seats
25 seats 500 seats 1,250 seats 2,500 seats
Legacy Stitched Stack
Okta Workforce + Workato + MuleSoft + Vanta + Splunk Audit
$1,380,000 / yr
CEDX Audit + Full Estate Bundle
All 132 applications · Canonical Postgres · Unlimited Copilot
$267,000 / yr
Verified Annual Hard Savings
Plus 0 middleware sync failures
$1,113,000 / yr
TECHNICAL & PROCUREMENT FAQ · CEDX AUDIT

Questions operators and architecture teams ask before piloting CEDX Audit.

01 Is the software on this page real? +
Yes. Every screenshot is a capture of the running build and you can open the same build at /app/audit . It runs on demo data, which the page says next to the figures rather than in a footnote.
02 What does the assurance score measure? +
The trail's own trustworthiness: integrity pass rate (72% on the digest chain), source validation (6 of 24 healthy), admin-class volume and high-risk findings. It reads 47 in the demo, the product grading its own coverage before anyone else grades it.
03 What is a retention gap? +
A source keeping less than its configured floor: 15 in the demo, topped by an identity production log at 45 days against a 90-day floor. Nothing was deleted maliciously; the configuration just drifted, which is what most audit findings actually look like.
04 How are anomalies found? +
Forty-eight anomaly trails run over the stream: off-hours admin bursts, impossible travel, bulk exports, log-delete attempts. Each finding carries actor, source, severity and a score; the risk board tops out at 89 in the demo week.
05 What counts as an admin-class event? +
Config and privilege changes, 124 of the 320 demo events: policy updates, role assumes, group membership changes, secret operations. They are counted separately because they are the events an assessor asks about first.
LIVE SANDBOX · ZERO MIDDLEWARE · NO CARD REQUIRED

CEDX Audit is running right now. Open it and inspect the record.

Explore the live CEDX Audit workspace on canonical demo data at /app/audit, or book a 30-minute architecture session to map your first entity rollout.

Open live CEDX Audit (/app/audit) -> Book an estate architecture map