Tag zero-trust architecture