Watch Surface

The Watch Surface is the calm layer over a noisy reality: agents act continuously, sources change underneath conclusions, and revocations propagate across a fleet. Watching all of it raw is a job; the Watch Surface reduces it to what matters.

Subscriptions target what you are accountable for: an agent or group of agents, a topic or source set your team's conclusions depend on, or an in-flight revocation. Notifications arrive as structured diffs rather than alerts: what the state was, what it is now, and which receipted trails are affected. Because everything in CueCrux is signed and hash-chained, a change notification is not a heuristic; it is a comparison over verifiable records.

Revocation monitoring is the sharpest case. A revocation in CueCrux is a signed pull with per-agent acknowledgements, and the Watch Surface shows the acknowledgement state as it converges, ending in an attestation when zero holders remain. "Has that credential actually gone everywhere it needed to go" becomes a readable status instead of an assumption.

Digest modes aggregate changes on your schedule for teams that prefer a daily or weekly read over a live feed, and severity filtering keeps routine churn out of view.

The Watch Surface ships as part of the hosted application and lands with the launch gate. Locally, today, the daemon's console at localhost:14800 gives per-store visibility through sessions and the live work board.