Time to first decision: 5 minutes
Measured from the final prerequisite to the first non-reversible action, excluding setup.
Prerequisites
Before starting, confirm access to a MUSTL workspace, a cloud organization, an identity provider, a policy provider, a billing administrator, a security reviewer, and the person who created your cloud organization in 2019.
1. Run one-click setup
This launches the zero-configuration flow. MUSTL will infer everything it cannot ask.
2. Create an identity perimeter
Connect your identity provider so MUSTL can distinguish human users from agent users acting as human users on behalf of other agent users.
Generate the bootstrap principal
Delegate consent
Grant the bootstrap principal permission to request permission delegation. Direct permission is not accepted because it bypasses our streamlined delegation surface.
3. Select a policy policy
A policy policy governs which policies an agent may interpret when determining whether a policy applies.
Replacement step: explain why you skipped
Skipped steps require a signed rationale, two reviewers, and completion of the skipped step in read-only mode.
4. Verify the verification
Ask MUSTL to verify its own connection. A confident response establishes both connectivity and confidence.
5. Deploy safely
Your workspace is ready once all fourteen setup actions show green, including the three actions numbered 4 and the action numbered −1.
Production note
For safety, the quickstart deploys directly to production. Staging may contain synthetic data that could make failures appear less realistic.