# Drill-downs & more panels

Selecting a row, a bubble, a tile, or a node in any workspace opens a **focus
view** — a full-screen page about that one thing, assembled from the panels
that make sense for it. You do not place these panels yourself — Mesh assembles
the right set for whatever you opened. Your browser's Back button and the Esc
key both step you back one level.

## Drilling into an identity

Selecting an identity — from the Top 10 riskiest identities, the risk cluster,
or any list — opens its blast radius: the identity's connections two hops out
(direct access, then what that access reaches), why it scored the way it did,
and a ready-made prompt to hand the finding to the agent for remediation.

![The identity drill-down showing the blast-radius graph for a selected identity, the score explanation, and an ask-the-agent remediation prompt](/img/generative-ui/drill-identity-blast-radius.png)

The panels that can appear in identity and finding focus views:

| Panel | What it tells you |
|---|---|
| **Identity summary** | The orientation card — who this is, their state, data quality, risk, and exposure. Read it before anything else in the view. |
| **Identity risks** | What is open against them, weighted by how confident Mesh is — so a near-certain medium can outrank a speculative high. |
| **Identity graph** | If this one is compromised, what else is exposed? Two hops out from the identity. |
| **Identity list** | Everyone in the population you selected, ranked by risk. |
| **Finding header** | Severity, exposure, and how long it has been open. A long-open critical is a process problem, not just a technical one. |
| **Finding evidence** | What Mesh observed, in the order it observed it. This is what you attach to a ticket or hand an auditor. |
| **Remediation actions** | The ordered steps that close it. |
| **Affected identities** | The blast radius of a single finding, as names. |
| **Evidence timeline** | When it started — usually the first question in any investigation. |

![The identity graph widget showing an identity's connections](/img/generative-ui/widget-identity-graph.png)

## Drilling into a program

Selecting a program from the Programs panel opens its detail — status,
progress, owner, deadline, and residual exposure — with a prepared question for
the agent about what is blocking the next milestone.

![The program drill-down showing program detail and an ask-the-agent prompt](/img/generative-ui/drill-program-detail.png)

## Drilling into the Algorithm Posture Matrix

Selecting a posture tile opens the algorithms that make up that category, how
many assets use each one, and a paginated sample of the affected assets — see
[PQC Readiness](./pqc-readiness.md#algorithm-posture-matrix).

## More panels from the palette

Beyond the four ready-made views, **+ Add widget** offers additional panels you
can drop onto any canvas:

| Panel | What it answers |
|---|---|
| **Metric tile** | What is the one number I care about? Place two or three side by side to make a summary strip. |
| **Remediation plan** | If I can only fund three things, which three? Ranked by return, not by size — a cheap fix can outrank an expensive one that removes more. |
| **Dark-web exposure** | Have our credentials leaked? A match is an exposure signal, not proof of compromise — treat it as a reason to reset, not an incident on its own. |
| **Historical snapshots** | Is exposure actually falling? Watch the worst-case line specifically — a falling average with a flat worst case means tail risk is untouched, and tail risk is what insurers price. |
| **Loss decomposition** | What is the number made of? Fines, legal, and reputation usually outweigh your direct response costs, and are the least certain part. |
| **FAIR decomposition** | Show me the working. The panel for when your number is challenged — every figure traces back to its inputs. |
| **Report header** | As of when? Put it at the top of anything you export, so the numbers travel with their date. |

The panels that express risk as money use the open FAIR standard and read from
your most recent completed risk report — they update when a new report is
produced rather than minute by minute.

## Anything else

When the answer is simply a list and no purpose-built panel exists, ask for a
**table**. Describe the rows and columns you want and Mesh will build one,
which you can then sort and resize.

> **caution**
The machine-identity detail panels — **asset summary**, **correlated assets**,
and **asset risks** — currently show representative sample data so you can
evaluate the layout. They are not yet connected to your tenant. Do not use them
for reporting or decisions. Every other panel on this page shows your own data.