CUSTOS: Toward Forensic-Ready Zero Trust at the Capture-Containment Boundary

Zero Trust ZT replaces implicit trust with continuous verification, but mutual TLS, ephemeral workloads, identity-centric control, and automated remediation reduce payload visibility, weaken IP-based attribution, and shrink the window for acquiring volatile evidence. We propose CUSTOS, a...