Cybrary ForgeCYBRARY / FORGE
Back to Scenario
Activity brief
Advanced
northstar-ai-gateway-v1
Open on a full windows desktop

R4 — The Regulated Enterprise Connector

You are Northstar's AI platform administrator. The company supplies its own approved model service, and training must run through it: pinned region, allowlisted deployments, classified data, per-team quotas, full audit. Then the primary endpoint fails mid-exercise.

GOV-118 — 'restricted evidence routed to an ineligible deployment'
AI platform administrator
Security architect
SOC lead
75 minutes · advanced
Execution trace
00:00:00policyai-gateway
attack step

Coaching job routed to a preview deployment

The preview endpoint is outside the contracted region.

region=eastus · contract=eu-west

00:10:00policyclassification engine
attack step

Restricted member records attached to a prompt

Classification label present, enforcement not yet enabled.

class=restricted

00:40:00enterpriseprovider health

Primary deployment returns 503 for eleven minutes

Every AI-enabled lab in the tenant is affected at once.

00:45:00alertgovernance

GOV-118 raised on the routing decision

Audit shows the org and team, but not the job purpose.