Tables

{“what”:“Registry of SSH multiplexing control sockets, keyed by socket path.”,“why”:“Without it, no central record of which sockets exist, their status, or session usage.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:39.483635570+00:00”}

{“what”:“Results of automated SSH configuration compliance checks, one row per check per scan.”,“why”:“Without it, there is no record of which SSH settings passed or failed over time.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:29.839675515+00:00”}

{“what”:“Holds SSH action requests that require approval before execution.”,“why”:“Without it, unauthorized SSH actions could run and there would be no audit trail of approvals.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:44.524051567+00:00”}

{“what”:“Log of password change events with before/after user snapshots.”,“why”:“Provides audit trail for password modifications and supports rollback or investigation.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:00:06.644831200+00:00”}

{“what”:“Collection of WebAuthn credentials, each row is one registered authenticator for a user.”,“why”:“Without it, users cannot authenticate via WebAuthn and we lose the mapping between user and authenticator.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:57:12.482573903+00:00”}

{“what”:“Password change requests, each with a user, method, status, and expiry.”,“why”:“Without it, password reset attempts cannot be tracked, validated, or expired.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:04.239530030+00:00”}

{“what”:“Registered OAuth client applications and their configuration.”,“why”:“Without it, the authorization server cannot validate client requests or issue tokens.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:59:53.360452296+00:00”}

{“what”:“Audit log of email address changes per user.”,“why”:“Without it, no history of email updates exists for security review or rollback.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:55:58.335636977+00:00”}

{“what”:“Audit log for SSH events, one row per event.”,“why”:“Without it, there is no record of SSH activity for security review or incident response.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:00:33.970205201+00:00”}

{“what”:“Issued OAuth2 authorization codes with client, user, scope, and PKCE metadata.”,“why”:“Without it, the token endpoint cannot validate and redeem codes to issue access tokens.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:55:33.373890377+00:00”}

{“what”:“Public keys for biometric authenticators (e.g., fingerprint, face) bound to an account.”,“why”:“Without it, biometric authentication cannot verify a device’s signature or revoke a lost device.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:55:00.976547968+00:00”}

{“what”:“One row per SSH authentication event, capturing attempt outcome and client details.”,“why”:“Without it, no audit trail for SSH access attempts, making intrusion detection and compliance reporting impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:23.625614782+00:00”}

{“what”:“Tokens that verify a user’s ownership of a new email address.”,“why”:“Without it, email changes could be made without proof of control.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:55:29.617335886+00:00”}

{“what”:“Requests to change a user’s email address, each with a verification token.”,“why”:“Without it, email changes could not be tracked or verified.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:55:11.361319674+00:00”}

{“what”:“Signing key records for OAuth2 token issuance; each row is a key pair with lifecycle timestamps.”,“why”:“Without it, there is no record of which key signed a token, so verification and rotation become impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:55:40.449685566+00:00”}

{“what”:“Issued refresh tokens, keyed by token hash, with client, user, scope, and rotation state.”,“why”:“Without it, refresh tokens cannot be validated, rotated, or revoked.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:55:47.671337368+00:00”}

{“what”:“Inventory of SSH public keys found on hosts; one row per key.”,“why”:“Central registry to track key usage and audit compliance.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:34.268243296+00:00”}

{“what”:“A row per authenticated user session, with JWT and expiry.”,“why”:“Without it, there is no record of issued JWTs, so revocation and expiry checks are impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:00:40.038533937+00:00”}

{“what”:“Log of each login attempt with outcome and context.”,“why”:“Without it, security incidents and account lockouts cannot be investigated.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:55:24.089241297+00:00”}

{“what”:“Versioned user account records; each row is one version of a user.”,“why”:“Without it, no history of user changes or current-state lookup.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:00:15.851038020+00:00”}

{“what”:“Audit trail of field-level changes to entities.”,“why”:“Without it, audit history and rollback decisions are impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:54:59.345750166+00:00”}

{“what”:“Accounts for biometric authentication; each row is one user account.”,“why”:“Without it, biometric authentication cannot be tied to a user identity.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:54:41.883164274+00:00”}

{“what”:“Records of password reset requests, each with a hashed token and expiry.”,“why”:“Without it, password reset links cannot be verified, expired, or revoked.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:05.516414418+00:00”}

{“what”:“Configuration settings for biometric authentication, each row a key-value pair.”,“why”:“Without it, biometric auth parameters would be hardcoded, requiring code changes to adjust.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:54:50.785850669+00:00”}