Tag zero-trust model