Discovery finds things running on your infrastructure that PrivateNexus doesn't know about yet, so your governance layer doesn't quietly drift out of sync with reality.
Background discovery agents watch three sources:
Anything Discovery finds lands in a pending queue, not directly into your service registry — nothing gets auto-registered without a human looking at it first. From the queue you can:
Each candidate arrives with as much inferred detail as Discovery can work out on its own (a suggested name, category, and health-check endpoint where one can be reasonably guessed) — you can accept the suggestion as-is or adjust it before approving.
The gap Discovery closes is a real one: infrastructure that grows by hand, over time, tends to accumulate services nobody wrote down anywhere. A governance layer is only as good as its coverage — Discovery is what keeps that coverage honest instead of trusting that everything was registered when it was first deployed.