Then the state at present is changing hundreds of times a day, without being centrally visible, via runtime query or configuration service. Seems like it would

Then the state at present is changing hundreds of times a day, without being centrally visible, via runtime query or configuration service. Seems like it would be hard to retrospectively analyze what could connect to what. Maybe consider a permissive system, that allows a service code change to change the connectivity graph without a review step, but centrally logs the change; another service can supervise what's happening, and alert if strange things happen. It would help to have a system for categorising service types; the graph properties of the system might be useful for understanding that. Looking at service changes in terms of graph properties, like edit distance, can also be useful.