Using Guardian

Know what was checked.

Confidence comes from a clear view. See which areas Guardian evaluated, where visibility was limited and what to review next.

Coverage is part of every review. Missing access or incomplete observation is not a clean-health result.

Coverage and scale#

Coverage shows whether each collector/rule domain was fully observed, partial or unavailable. Guardian fails closed rather than presenting inaccessible inventory as healthy. The qualified maximum is the documented large-site profile, including evidence-time traversal of 4,781 Project/Role detail targets and 5,000 direct memberships. Internal hard ceilings of 10,000 details and 50,000 memberships are safety limits, not a broader support promise.

Interpreting a result#

  • Complete: the domain was evaluated within the supported scope. Findings still require administrator review.
  • Partial: only part of the domain could be evaluated; review the displayed reason.
  • Unavailable: the domain could not be evaluated; verify access and product availability before drawing conclusions.

An empty queue is not site-wide health assurance. Internal safety ceilings are not broader support commitments.

See the user guide for the supported rule catalog.