identity-blast-radius

For a user, service account, role, key or other identity, show what it can reach across platforms, who owns it, and how it has been used. Use when the user asks "what can X access", "who owns X", "is X still used", or before offboarding or rotating an identity.