VOL. II · TRUSTFIX.IO · MERIDIAN NORTH REGISTRY

— THE TRUST LEDGER · ISSUE N°1623 —

2026-04-24 · 14:00:00 UTC

Dispatch · Non-Human Identity · 2026

The identities
running your
company are not human.

Service accounts. IAM roles. OAuth apps. AI agents. MCP servers.
They outnumber your people 92 : 1. And nobody — until now — has been running the registry.

Open the registry Read the spec →

TRUSTED BY TEAMS BUILDING THE AGENTIC INTERNET

STRIPE

DATADOG

RAMP

LINEAR

ANTHROPIC

RETOOL

LIVE · SIGNED TRUST MANIFEST · LEDGER.v2

TRUSTFIX · MANIFEST · FORM M-1 · REV 04/26

Certificate of Identity

Non-human principal · verified · ephemeral

SUBJECT

bedrock-agent-prod.meridian-north.aws

Signature

0x7f3c9a2e4b8d1c6f

Scope

iam:* → s3:GetObject/analytics-*

TTL

sts:15m · single-use · ephemeral

Baseline

σ = 0.03 · no drift · within envelope

Ledger receipt

#RXP-2026-41204 · signed 14s ago

VERIFYING…

Commissioner of Trust · J. Okonkwo

Every identity on TrustFix gets one.
Signed. Replayable. Auditable in 8 seconds.

GATE · p5042ms

ATTESTED (24h)12,438,291

MEDIAN TIME-TO-FIX9m 42s

BLAST ↓ (Q)$1.84B

SIGNED MANIFESTS847

SHADOW IDs STOPPED38

TRUST UPTIME · 30d99.997%

FED. PEERS14

MCP SERVERS INDEXED2,108

GATE · p5042ms

ATTESTED (24h)12,438,291

MEDIAN TIME-TO-FIX9m 42s

BLAST ↓ (Q)$1.84B

SIGNED MANIFESTS847

SHADOW IDs STOPPED38

TRUST UPTIME · 30d99.997%

FED. PEERS14

MCP SERVERS INDEXED2,108

GATE · p5042ms

ATTESTED (24h)12,438,291

MEDIAN TIME-TO-FIX9m 42s

BLAST ↓ (Q)$1.84B

SIGNED MANIFESTS847

SHADOW IDs STOPPED38

TRUST UPTIME · 30d99.997%

FED. PEERS14

MCP SERVERS INDEXED2,108

§ I · THE THESIS

“Trust is not a toggle. It is a ledger.”

J. OKONKWO · CTO

For forty years, security was built around one idea: humans log in. Usernames. Passwords. MFA. Audit trails of who-did-what.

That idea is now obsolete. Your Bedrock agent runs as a service account. Your CI pipeline writes to production as a machine. Your Claude MCP server signs transactions. The humans left the loop years ago.

TrustFix is what you build when you accept that every critical decision in your company is now made by something that can’t be interviewed, can’t be fired, and can’t explain itself. We built the registry.

§ II · THE GAP

Your existing stack was built for humans.

Every tool in your SOC today answers a question about humans. None answers the question “which of my 50,000 machine identities can reach Stripe production, right now?”

TOOL 01

CSPM / CNAPP

Answers: Cloud misconfigs

Misses: the identities behind them

e.g. Wiz · Orca · Palo Alto

TOOL 02

IAM / IdP

Answers: Who the humans are

Misses: everything that isn't human

e.g. Okta · Entra · Ping

TOOL 03

Secret scanner

Answers: Where keys leaked

Misses: what the keys unlock

e.g. GitGuardian · TruffleHog

TOOL 04

SIEM / XDR

Answers: What already broke

Misses: what's about to

e.g. Splunk · Sentinel · CrowdStrike

THE ANSWER

TrustFix

The registry for non-human identity. Every agent, NHI, and MCP — discovered, verified, and governed with signed receipts for every decision.

Est. 2025
Meridian North · Reg. v2.4

§ III · THE INSTRUMENTS

Four instruments. One registry.

TrustFix is not a dashboard. It is four precision instruments, each built for one job, composed into a single institutional workflow.

INSTRUMENT 01

The Ledger.

Every policy change, every Gate decision, every rotation — written to an append-only, signed ledger. Every number you see in TrustFix is clickable back to its receipt. Prove, don’t promise.

append-only

immutable

2-of-3 signers

tamper-evident

p50 11ms

at scale

§ IV · THE ARITHMETIC

We reduced blast radius by $1.84B last quarter.
Here’s the math.

Reachable PII rows (before)

iam:* → s3:GetObject/*

28.4M

Policy applied

Dry-run replayed · 30d traffic · no breakage

FIX-0042

Reachable PII rows (after)

↓ 33% via scope reduction

18.9M

Regulatory exposure prevented

GDPR Art. 82 · CCPA §1798.150

$496M

Signed receipt

Immutable · clickable · 2-of-3 signed

#RXP-2026-41204

80%

Fix adoption rate

vs. industry 3%

2.3hr

Mean time to fix

vs. industry 41 days

8sec

Evidence bundle build

4 frameworks, signed

99.997%

Trust uptime · 30d

the ledger, always

TESTIMONY · DESIGN PARTNER · PUBLIC

“It is the first security product in a decade that my board reads instead of tolerates.”

Priya Narayan

CISO · PUBLIC FINTECH · $2.8B ARR

§ 03 · HOW IT WORKS

Connect in 5 minutes.
First fix in 10.

Connect

2 min

One-click AWS, GCP, Azure, GitHub, Okta. Read-only. No agents. No keys to rotate.

Discover

7 min

Every identity mapped — IAM roles, service accounts, OAuth apps, AI agents, MCP servers, certificates.

Verify

197 tests

6-layer Policy Intelligence Engine validates every trust chain. Toxic combinations surfaced.

Fix

1 PR

Validated Terraform PR opened in your repo. 94%+ confidence. Merge when ready.

§ 04 · HOW WE COMPARE

The only NHI platform that
fixes what it finds.

Capability

Astrix

Oasis

Clutch

TrustFix

RECOMMENDED

Discovery

AI Agent Security

–

MCP Server Detection

—

Auto-Remediation (IaC)

—

Terraform Fix PRs

—

Multi-model Validation

—

Toxic Combination Detection

—

Compliance Evidence Export

—

–

—

Self-serve / PLG

—

Free Tier

—

$400M+ in combined competitor funding. Zero auto-remediation.

Head-to-head · N°01

TrustFix vs Astrix

Astrix finds. TrustFix fixes.

Head-to-head · N°02

TrustFix vs Manual Audit

The ledger vs the PDF. 84× faster.

§ 05 · FIELD REPORTS

What security teams
tell us, on the record.

Trust Score94

TrustFix found 23 OIDC misconfigurations our CSPM completely missed. The Terraform fixes were production-ready on first review.

Priya R.

Head of Security · Series B Fintech

Trust Score89

We went from quarterly manual audits to continuous verification. Our SOC 2 evidence is now generated automatically, pulled straight from the graph.

Marcus L.

CISO · Healthcare SaaS

Trust Score91

The AI agent security module caught Bedrock misconfigurations nobody else even checks for. We ship agents weekly — this is the only thing letting us sleep.

Jordan K.

Platform Engineering Lead · Enterprise

Works with your stack

48 native integrations · See all →

Vault

Terraform

Splunk

Datadog

Jira

AWS

GCP

Azure

GitHub

GitLab

ArgoCD

Bedrock

Copilot

Vertex

Drata

Vanta

Slack

PagerDuty

ServiceNow

Kubernetes

Okta

Auth0

CircleCI

Jenkins

Vault

Terraform

Splunk

Datadog

Jira

AWS

GCP

Azure

GitHub

GitLab

ArgoCD

Bedrock

Copilot

Vertex

Drata

Vanta

Slack

PagerDuty

ServiceNow

Kubernetes

Okta

Auth0

CircleCI

Jenkins

§ 06 — Start now

Stop finding.
Start fixing.

Connect your first platform in 2 minutes. TrustFix is invitation-only — request access.

Launch app Book a CISO briefing

SOC 2 evidence exportRead-only accessHuman approval requiredInvitation-only access

The identitiesrunning yourcompany are not human.

Your existing stack was built for humans.

Four instruments. One registry.

We reduced blast radius by $1.84B last quarter.Here’s the math.

Connect in 5 minutes.First fix in 10.

The only NHI platform thatfixes what it finds.

What security teamstell us, on the record.

Stop finding.Start fixing.

The identities
running your
company are not human.

We reduced blast radius by $1.84B last quarter.
Here’s the math.

Connect in 5 minutes.
First fix in 10.

The only NHI platform that
fixes what it finds.

What security teams
tell us, on the record.

Stop finding.
Start fixing.