Documentation Index
Fetch the complete documentation index at: https://docs.axiomancer.io/llms.txt
Use this file to discover all available pages before exploring further.
Service status page
Overwatch now ships with a built-in status page that surfaces real-time health for core platform services — database connectivity, AIS data freshness, and pipeline health. Each service shows operational, degraded, or down with a 24-hour visual timeline, and a programmatic/api/health endpoint is available for external monitoring tools. Health checks run every five minutes.Wider AIS coverage and tiered retention
Default vessel tracking radius around each monitored port has expanded from roughly 55 km to 220 km, so in-transit vessels appear on your map well before reaching anchorage. A global AIS mode is also available for use cases like dark fleet detection and open-ocean STS monitoring. Position history now follows a tiered retention policy — full resolution for the last 7 days, one report per vessel per minute from 7 to 30 days, and full-resolution archives beyond that. See AIS coverage for configuration details.Redesigned vessel icons and Long Beach hero map
Vessel markers on the live map now use elongated, bow-forward triangles that match the silhouette used on VesselFinder and MarineTraffic. Each triangle is colored by vessel type and rotated to heading, so traffic patterns and vessel classes are readable at every zoom level. The default hero map location has also moved from the Bosphorus to the Port of Long Beach.Hydrostatic cargo estimates backfilled
Approximately 16,000 departed vessel visits that were missing hydrostatic cargo estimates have been backfilled. If you query historical cargo validation data, you should see more complete draft and displacement readings for past visits. No action is required on your part.More reliable enrichment and risk pipelines
Several Overwatch backend pipelines were stabilized this week:- Vessel metadata enrichment from Equasis now handles concurrent requests instead of queueing serially, eliminating the intermittent timeouts that were causing roughly 120 failed requests per day. Session-renewal retries also fully re-establish the session before re-fetching data.
- The daily training-feature job for the vessel risk score model — including ship-to-ship transfer history and identity-change events — runs cleanly again after a column mismatch was corrected.
- Kinematic fingerprint computation now processes vessel visits in parallel chunks, so vessels with large visit histories no longer time out.
- The vessel-visits processor uses smaller batches and the disruptions pipeline enforces a 15-second per-query timeout, so port-call timelines and disruption signals stay current through load spikes.
- Loitering detection now references the correct timestamp column, improving behavioral anomaly accuracy.
- Rate-limited AIS requests are no longer logged as failures, reducing false error noise in pipeline monitoring.
Cell scoring writes restored and walkability scoring fixed
Two silent regressions in cell scoring were resolved:- The scoring pipeline had been reporting successful runs while writing zero rows — upsert errors were being swallowed rather than surfaced, stalling score updates since around April 22. Scoring now fails loudly on write errors, so cell scores, rankings, and queries through the Locus API are flowing again.
- Walkability scores were silently returning null for any cell that wasn’t already cached, after the upstream OpenStreetMap data provider began rejecting requests without a User-Agent header. New cells now resolve walkability data correctly, and the accessibility signal group reflects the full set of pedestrian-network signals again.
Faster code enforcement updates
Code enforcement data collection was timing out for all monitored cities because the 30-day lookback exceeded processing limits. The collector now uses a 7-day window matching its weekly cadence, so code enforcement records flow into cell scoring and the Locus API without interruption.Audit log
Layer now records an immutable audit trail of every significant action in your workspace — integration connects and disconnects, asset changes, role grants and revocations, contract uploads, and more. Each entry captures who performed the action, what was affected, and when it happened. You can view the full log under Settings → Audit log and filter by action type or search across entries. Events are retained for six years to support HIPAA and SOC 2 compliance requirements.AI spend tracking
You can now track per-employee usage and cost across AI tools — including OpenAI, Anthropic, GitHub Copilot, Cursor, Gemini, Perplexity, and RouteShift. Each employee’s AI tab shows a breakdown by model, token count, and source so you can understand where AI spend is concentrated and identify optimization opportunities.Virtual cards for SaaS spend
Layer can now issue virtual cards with per-vendor spend caps. Set a hard limit when issuing a card and adjust it on the fly without reissuing — giving finance teams granular control over SaaS purchases. Available under Spend → Virtual cards.Spend budgets
Set monthly or annual spending budgets scoped by department, category, or individual app. The budgets dashboard tracks real-time utilization and alerts you when spend approaches or exceeds the limit. Available under Spend → Budgets.SaaS benchmarks
Layer now compares your per-employee SaaS spending against industry benchmarks across categories like cloud infrastructure, developer tools, and HR. The benchmarks page highlights where you’re overspending relative to similar organizations and surfaces actionable cost-reduction insights.License management and seat harvesting
A dedicated license inventory now shows total versus used seats, renewal dates, and cost per license across your SaaS stack. Built-in seat harvesting identifies inactive users so you can reclaim unused licenses and reduce waste.Access reviews
Launch user access review campaigns that ask employees to confirm which apps they actively use. Configure deadlines, custom messaging, and escalation rules. Completed reviews feed directly into license harvesting and offboarding workflows.Access approval workflows
Define multi-stage approval rules for new SaaS access requests. Approvals can route through manager, IT, security, and finance stages based on cost thresholds, with per-stage notification channels. Available under Settings → Access approval rules.Contract management with AI extraction
Upload SaaS contracts (PDF or manual entry) and Layer extracts key terms — vendor name, value, renewal date, auto-renewal clauses, and cancellation windows. The contracts page tracks renewal timelines and generates AI-powered recommendations (negotiate, downgrade, cancel, or consolidate) so you can act before deadlines pass.Renewal calendar
A dedicated renewal timeline with urgency indicators and notice-period deadlines for auto-renewing contracts. Configure alert settings to get notified before cancellation windows close, and export renewals as CSV or iCal feeds.Automated offboarding
When an employee departs — detected via HRIS webhook or triggered manually — Layer runs a revocation pipeline that removes OAuth and SSO access, reclaims licenses, queues device returns, and generates compliance evidence. The offboarding card on each employee’s profile shows real-time progress.Employee onboarding checklist
Each new hire’s profile now includes a day-one readiness tracker showing which provisioning steps (app access, device setup, account creation) are complete and which are still pending.Device shipping
Ship hardware to employees directly from Layer with carrier tracking and label generation. International shipping includes vendor comparison across Workwize, Hofy, Firstbase, and Allwhere, with customs-hold tracking and cost quoting.Compliance readiness dashboard
A full compliance control center is now available under Settings → Compliance. It shows readiness scoring, coverage and freshness percentages, gap analysis by severity, and lets you search, filter, and sort controls. Evidence tracking is built in, and configurations can be imported or exported as portable presets.Webhook notifications
Configure webhook channels under Settings → Notifications and route specific events — shadow app detected, renewal approaching, control failing, access review due — to external systems like Slack or PagerDuty.Custom fields
Define custom metadata fields (text, number, boolean, or date) on assets, contracts, apps, controls, and evidence records to tailor the platform to your organization’s taxonomy. Available under Settings → Custom fields.Scheduled reports
Set up recurring CSV or PDF reports for renewals, assets, or apps on a daily, weekly, or monthly cadence. Reports are delivered to a list of email recipients with run-status tracking. Available under Settings → Reports.Global search
A cross-entity search bar now lets you find apps, people, assets, and contracts from a single input. Results are grouped by type with direct links to detail pages.MCP server for AI agents
Layer now exposes a Model Context Protocol endpoint that lets AI assistants query your asset inventory, discovered apps, compliance controls, and platform overview counts programmatically. This lets tools like Claude and ChatGPT interact with your Layer data directly.Free shadow IT scan
A no-signup scan is now available that connects to Google Workspace via OAuth, discovers up to 50 shadow IT apps in under five minutes, and generates a shareable risk report. No account required.Browser extension for SaaS discovery
The Axiom Layer Precision browser extension tracks active versus passive SaaS usage and login events on managed devices, syncing real-time app discovery data back to the platform for more accurate shadow IT detection.Plan-tier limits now enforced at runtime
Layer plan limits — employee count, apps shown on free scans, contract AI extraction, and per-minute API and search budgets — are now enforced live across the dashboard and API. Hitting a cap surfaces an in-context upgrade banner instead of failing silently, and/api responses include rate-limit headers so you can see your remaining budget. API access is reserved for the Scale plan; lower tiers receive a 403 with an upgrade link. See Plans and billing for the full per-tier matrix.Dashboard persona setting
You can now switch your dashboard perspective between Finance, IT, or Both under Settings, surfacing the metrics and views most relevant to your role.Hardware lifecycle settings
Configure device depreciation periods, replacement age thresholds, and warranty-expiry requirements under Settings to drive automated hardware refresh recommendations.Shadow app review queue
Newly discovered shadow apps now flow through a dedicated review queue with an approve/reject workflow and explicit confirmation step, so nothing changes in your inventory until you’ve reviewed it.Refreshed Layer brand accent
Layer’s brand accent color has shifted from amber to pink across the Layer marketing site and dashboard. The cross-product navigation bar at the top of every Axiom site now reflects the updated palette — pink for Layer and indigo for Locus — keeping product accents consistent wherever you are. Amber is still used to signal warnings like upcoming renewals and alert states, so nothing changes for in-product status indicators.Higher-contrast labels in the cross-product bar
Inactive product labels in the cross-product bar at the top of every Axiom site now render at a stronger contrast against the dark background, meeting WCAG AA contrast guidelines. Active and hovered states are unchanged.Higher-contrast Locus accent in the cross-product bar
The active Locus label in the cross-product bar at the top of every Axiom site now uses a lifted indigo shade that meets WCAG AA contrast against the dark bar background. The canonical Locus brand color is unchanged everywhere else — this adjustment is scoped to the bar context only, where the previous shade fell just short of the contrast threshold for normal-weight text. No action is required on your part.Product-aware Docs link in the cross-product bar
The Docs link in the cross-product bar at the top of every Axiom site now lands you in the docs section for the product you’re currently viewing — Layer, Overwatch, Locus, or Codex — instead of always opening the docs root. If you’re on a marketing or shared page with no active product, the link falls back to the docs section for whichever product’s site you’re on.Locus brand colors and Docs fallback corrected
The cross-product bar on locus.axiomancer.io now uses the updated indigo accent for Locus and the new pink accent for Layer, matching the refreshed brand identity used elsewhere on the platform. The Docs link on Locus marketing pages also now falls back to the Locus docs when no product is active, instead of incorrectly defaulting to the Layer docs. No action is required on your part.Overwatch brand colors and Docs fallback corrected
The cross-product bar on the Overwatch site now uses the updated pink accent for Layer and indigo accent for Locus, matching the refreshed brand identity used elsewhere on the platform. The Docs link on Overwatch marketing pages also now falls back to the Overwatch docs when no product is active, instead of incorrectly defaulting to the Layer docs. No action is required on your part.Improved contrast for cross-product bar labels
Inactive product labels in the cross-product bar at the top of every Overwatch page are now easier to read. The label color was lifted to meet WCAG AA contrast requirements against the dark bar background, so links to Layer, Locus, and Codex stay legible for users with low-vision needs. No action is required on your part.Higher-contrast Locus accent in the cross-product bar
The Locus label in the cross-product bar at the top of every Overwatch page now uses a slightly lighter indigo so it meets WCAG AA contrast against the dark bar background. The canonical Locus brand accent is unchanged everywhere else — only the bar context is adjusted to keep the wordmark legible for users with low-vision needs. No action is required on your part.Higher-contrast solid buttons on the Layer marketing site
Solid-fill buttons on axiomlayer.com — the Get started CTA in the navigation bar and the active state on integration category pills — now meet WCAG AA contrast requirements for white text. Previously, the indigo brand accent fell just short of the 4.5:1 threshold for normal-weight text. A stronger indigo is now used for these solid backgrounds, while the canonical brand accent remains in place for highlights, dots, and borders. No action is required on your part.Slack integration credentials encrypted at rest
Slack workspace credentials used by Layer’s shipping notification integration are now encrypted at rest, matching how every other integration connection is stored. Existing connections were migrated transparently and continue working without any reconnection. No action is required on your part.Stronger ownership checks on virtual card issuance
Layer now verifies that the cardholder belongs to your organization before issuing a virtual card, eliminating a class of cross-tenant errors that could have allowed a card to be issued against another workspace’s billing balance. Card issuance flows are unchanged for legitimate users. No action is required on your part.Walkability scoring restored
Fixed an issue where walkability scores were silently returning null for any cell that wasn’t already cached. The upstream OpenStreetMap data provider began rejecting requests without a User-Agent header, and the accessibility signal group — which feeds walkability into cell scores — had been quietly degrading as a result. New cells now resolve walkability data correctly, and accessibility scores reflect the full set of pedestrian-network signals again. No action is required on your part.Refreshed Locus social previews
Link previews and social cards for locus.axiomancer.io now render with the updated Locus identity — indigo accent on a near-black foundation — replacing the off-brand placeholder used previously. Sharing a Locus URL on Slack, LinkedIn, or X will show the new card automatically. The marketing site also serves its primary fonts directly, removing a render-blocking request and reducing the brief flash of unstyled text on first load.Improved accessibility on Locus marketing pages
The Locus homepage and report page now meet WCAG AA contrast standards across hero copy, sub-text, and the cross-product bar’s inactive product labels. Both pages also expose a proper<main> landmark so screen readers can jump straight to the primary content. No action is required on your part.Improved accessibility on the Overwatch homepage
The Overwatch homepage now meets WCAG AA contrast standards in the footer — de-emphasized footer copy that previously failed contrast checks is now legible against the dark background, while keeping the same visual hierarchy. The page also exposes a proper<main> landmark so screen readers can jump straight to the primary content, and footer column headers use a correct heading order so audits like Lighthouse no longer flag the home page. No action is required on your part.Higher-contrast labels on the live system-status chip
The floating system-status chip on the Overwatch homepage — which surfaces live AIS position and vessel counts — now renders its POS and VESSELS caption labels at WCAG AA contrast against the chip’s amber-tinted background. Footer de-emphasis tiers were also retuned in the same pass so that secondary and tertiary footer copy both clear the AA threshold against the dark page background. No action is required on your part.Sharper page titles and accurate signal counts
The Locus homepage and the report page now have their own titles, descriptions, and link previews instead of falling back to a generic site-wide default. Sharing either URL on Slack, LinkedIn, or X will show preview cards tailored to the page. The signals page also now reads its signal-group and data-source counts directly from the live catalog, so the description stays accurate as new sources come online.Final contrast tweaks for de-emphasized text and the Locus accent
Two remaining contrast misses on locus.axiomancer.io are now fixed. De-emphasized copy in the Locus page ticker now renders at WCAG AA contrast on the lighter surface where it lives, and the Locus accent in the cross-product bar at the top of every Axiom site has been lifted on its dark background so it also clears AA. The canonical Locus brand color is unchanged everywhere else. No action is required on your part.In-app support chat and link previews load reliably across browsers
The Layer dashboard’s Content Security Policy now allows the full set of providers it actually depends on — including Intercom for in-app support chat, Mux for embedded video, and the analytics stack used to power scheduled reports and usage dashboards. Previously, browsers enforcing strict CSP would silently block these requests, which could cause the support widget to fail to load and tracked events to be dropped. Existing sessions are unaffected; the fix takes effect on the next page load. No action is required on your part.Mux storyboard thumbnails load on the Layer marketing site
The hero video on axiomlayer.com now displays scrub-bar storyboard thumbnails correctly across browsers enforcing strict CSP. Mux Player loads its preview images fromimage.mux.com, which was missing from the marketing site’s media-src allowlist and was being silently blocked. The host has been added so storyboard previews render as expected. The hero video itself was unaffected. No action is required on your part.Mux storyboard thumbnails load on the Codex marketing site
The hero video on axiomcodex.io now displays scrub-bar storyboard thumbnails correctly across browsers enforcing strict CSP. Mux Player loads its preview images fromimage.mux.com, which was missing from the marketing site’s media-src allowlist and was being silently blocked by browsers — a violation that was also surfacing in Lighthouse best-practices audits. The host has been added so hover-scrub previews render as expected. The hero video itself was unaffected. No action is required on your part.Cleaner browser console on the Codex marketing site
Every page on axiomcodex.io now loads its favicon and tab icons cleanly, eliminating a 404 that was firing on every navigation and surfacing as a console error. The site now points at the existing Codex brand mark, so browser tabs, bookmarks, and pinned tab previews show the proper icon. No action is required on your part.Higher-contrast subtle text and category pills on the Layer marketing site
A follow-up Lighthouse audit caught two remaining contrast misses on axiomlayer.com. De-emphasized “subtle” copy on dark marketing surfaces — used for captions, eyebrow labels, and supporting microcopy — now renders at WCAG AA contrast against the dark background. The inactive category pills on the integrations wall (used to filter by IDP, MDM, finance, and so on) have also been darkened so their labels clear AA contrast on the light pill background. The canonical brand palette is unchanged everywhere else. No action is required on your part.Footer copy now meets WCAG AA contrast on the Overwatch homepage
A follow-up audit caught two tiers of de-emphasized footer text on the Overwatch homepage that were still falling below the WCAG AA threshold against the dark background. Both tiers have been lifted so they now clear AA contrast for normal-weight text, while preserving the existing visual hierarchy between primary, secondary, and tertiary footer copy. No action is required on your part.Higher-contrast labels on the live system-status chip
The “POS” and “VESSELS” labels on the floating system-status chip shown on the Overwatch homepage now use a lighter slate tone that meets WCAG AA contrast against the chip’s tinted background. The status values themselves and the chip’s overall styling are unchanged. No action is required on your part.H3 spatial index populated on AISHub vessel positions
AIS positions ingested from the AISHub REST source were being written without anh3_index value, leaving spatial joins between ais_positions and other H3-indexed datasets incomplete for that subset of rows. Each AISHub position now computes the resolution-8 H3 cell at write time, matching the Codex normalization standard already enforced for AISStream and other Overwatch ingestion paths. This brings h3_index_pct for ais_positions back to 100% on the envelope coverage dashboard, so queries that join on h3_index — including terminal-level port call attribution — return the full set of AIS-derived results again. No action is required on your part.Live vessel positions endpoint restored
Fixed an issue where the live-vessels endpoint that powers the Overwatch map was returning a 500 error after a recent change to the underlying AIS retention layout. The endpoint now resolves the per-vessel last-seen timestamp correctly, so live map views and any external integrations consuming the same GeoJSON feed start populating again. The public response shape is unchanged. No action is required on your part.Cleaner browser console for anonymous visitors
Anonymous visitors to axiomoverwatch.io no longer see a spurious 401 in the browser console from the in-app support messenger’s identity check. The messenger now correctly treats unauthenticated visitors as anonymous without surfacing the warning. Behavior for signed-in users is unchanged. No action is required on your part.Improved accessibility on the Overwatch blog
The Overwatch blog index and individual blog posts now expose a proper<main> landmark, so screen readers can jump straight to post content. De-emphasized slate copy on both pages was also lifted past WCAG AA contrast against the dark background, matching the contrast tier already used on the Overwatch homepage footer. The visual hierarchy is unchanged. No action is required on your part.Docs link on the Axiomancer Labs landing page
The Axiomancer Labs landing page now exposes a Docs link in both the top navigation and the footer, so you can jump to the docs from the parent site without first navigating into a specific product. The link lands on the docs root, where the cross-product bar takes over to route you to Layer, Overwatch, Locus, or Codex docs. No action is required on your part.Higher-contrast solid buttons on the Axiomancer Labs landing page
Solid-fill buttons on the Axiomancer Labs landing page — including primary CTAs that use the cyan brand fill — now render with dark label text instead of white, lifting them well past WCAG AA contrast for normal-weight text. The CTA glow was also retuned from a stale purple to a cyan tone so the shadow matches the button fill. The canonical brand palette is unchanged everywhere else. No action is required on your part.Axiomancer Labs landing page brand colors aligned
The cross-product bar on the Axiomancer Labs landing page now uses the updated pink accent for Layer and indigo accent for Locus, matching the refreshed brand identity used everywhere else on the platform. Inactive product labels in the bar were also lifted to meet WCAG AA contrast against the dark background. No action is required on your part.Higher-contrast shared footer across Locus content pages
The shared content footer on locus.axiomancer.io — used across the pricing, blog, pulse, and docs pages — now meets WCAG AA contrast standards. Column headings, body copy, the copyright line, and the Privacy and Terms links were running at low alpha values that fell short of the contrast threshold against the dark background. All four tiers were lifted in a single sweep, matching the contrast already used on the home and report pages. The visual hierarchy is unchanged. No action is required on your part.Improved accessibility on the Overwatch platform page
The Overwatch platform page now exposes a proper<main> landmark so screen readers can jump straight to the primary content. Section headings under Live products, Coming Q3, and Who uses Overwatch were promoted to a correct level so the page reads as a clean outline in audits like Lighthouse. De-emphasized slate copy across the page was also lifted past WCAG AA contrast against the dark background, matching the contrast tier already used on the Overwatch homepage and blog. The visual hierarchy is unchanged. No action is required on your part.Larger tap targets on the Overwatch blog sidebar
Sidebar links on the Overwatch blog now clear the 24×24 pixel minimum tap-target size recommended by Lighthouse and WCAG. Each link in the Links column was previously rendered as bare text with tight row spacing, which left only a ~20 pixel safe-click diameter and could be hard to hit accurately on touch devices. The links now sit on padded rows with a slightly larger gap between them, so every entry exposes a comfortable tap target. The visual hierarchy and link styling are unchanged. No action is required on your part.Improved accessibility on Layer login and signup pages
The Layer login and signup pages now expose a proper<main> landmark, so screen readers can jump straight to the form without scanning past the page chrome. The primary Sign in and Create account buttons, along with the inline link between the two pages, now use a stronger indigo that clears WCAG AA contrast for white text. The visual hierarchy and brand palette are unchanged everywhere else. No action is required on your part.