Same control plane. Sites that run dark.
Factories, stores, vessels, clinics — agents are arriving at the edge faster than connectivity is. Edge sites enroll into the same Klyn control plane as your cloud estate: identity and policy live in the cloud, and a local enforcement point keeps deciding when the WAN doesn't.
Site enrollment & attestation baselines
Each site enrolls with a cryptographic identity; agents and devices on it get attestation baselines recorded in the control plane.
Drift detection
When a site’s agents deviate from their baseline — new binaries, new scopes, new destinations — Klyn flags it and the finding routes to a human owner.
Local gate
A site-resident enforcement point that carries cached policy, so deny-by-default keeps holding when the WAN drops.
Offline proof sync
Decisions made offline seal locally and reconcile to the central proof ledger when connectivity returns — one evidence trail, no gaps.