OptionaldriftFingerprint drift score (0–100) from fp-devicer, if available.
Human-readable reasons this device node is considered suspicious.
OptionalipIP risk score (0–100) from ip-devicer, if available.
OptionaltlsTLS consistency score (0–100) from tls-devicer, if available.
UTC timestamp of the most recent update.
Cached reputation signals for a device, populated from other plugins'
enrichmentInfo.detailsentries after eachidentify()call.Storing these allows
PeerManagerto propagate taint through the graph without requiring live calls to ip-devicer or tls-devicer.