Target
Hostname or managed alias, environment, expected SSH port, and service owner.
Draw the route before saving it.
A jump host is part of an access path, not a decorative checkbox.
Five facts per route.
Gateway
Whether the route crosses an approved SSH gateway and who operates it.
Identity
User role and authentication method; never place private material in the map.
Exception
Why the route differs, who approved it, and when the exception expires.
What the client can express.
Mobatek’s feature overview says an SSH gateway—also called a jump host—can be selected for SSH, Telnet, RDP, and VNC sessions. Its documentation also describes private-key selection, X11 forwarding, compression, and command execution in SSH session settings.
Those controls do not decide who should have access. Signal Yard documents the intended path, dependencies, evidence owner, and rollback note. Your identity, network, and server policies remain authoritative.
“The route record explains intent. The control plane grants access.”