How data gets there
Each workspace has ingest tokens. You put a token and the console’s URL in the agent’s environment, and the agent sends three kinds of request: a session start with the agent’s profile, one request per evaluated event, and a session end with the summary. See Connect an agent for every supported path, and Stream to Agentegrity Pro for how the Python exporter delivers them. When a session ends, the console seals it, appends a record to the workspace’s attestation chain and, if the agent’s library evaluated at least one event, issues an Ed25519-signed certificate.The console
The sidebar has four groups.
Screens refresh every 30 seconds while the tab is visible, and sooner when a session ends or a drift finding opens. The live toggle in the top bar pauses this.
Observed versus reported
The console separates what it saw from what the agent told it, and the separation shows up on every certificate.- Server observed. Event counts, evaluation counts, session start and end times, and duration. The console counted these as the requests arrived.
- Client asserted. Layer scores, the state of the agent’s local hash chain, attestation record counts and enforce mode. The library computed these inside the agent, and the console records and signs them as the agent’s claims.
Layer names and codes
The console uses two sets of short codes for the four layers. Certificates and the API use the codes in the second column; some charts use the third.
See How it works for what each layer checks.

