# Palantir Zero-Trust Service Mesh **Entity class:** Platform runtime security architecture **Architecture:** [[wiki/Signals, Silos, and Sovereign Software|Signals, Silos, and Sovereign Software]] ## Definition The **Palantir Zero-Trust Service Mesh** is the infrastructure-security layer spanning AIP, Foundry, and Apollo in which services are access-gated by identity, device health, and verification and operate under an assumption of hostile attack. ## Modern Defense and Cybersecurity Role This layer turns zero trust from an access slogan into runtime enforcement across deployed mission software. Apollo can mandate encryption, firewall, release, and runtime configurations across cloud, on-premises, edge, and disconnected environments. ## Chronological Proximity The unified architecture emerged as AIP, Foundry, and Apollo converged into one enterprise operating system for data, AI, and operations. ## Relational Proximity [[wiki/Palantir Apollo|Apollo]] enforces deployment state, [[wiki/Palantir Security Markings|markings]] and [[wiki/Palantir Object-Level Security|object security]] govern data access, and enterprise identity and security tools integrate at the boundary. ## Collection Routes [[collections/The Civilian Intelligence Marketplace|The Civilian Intelligence Marketplace]] · [[collections/Terrorism, Counterterrorism, and the Intelligence Environment|Terrorism, Counterterrorism, and the Intelligence Environment]] ## Sources / Provenance - [Primary documentation](https://www.palantir.com/docs/foundry/architecture-center/platforms)