You are responsible for a microservices platform where internal services authenticate with mTLS and exchange customer and operational data through service-to-service APIs. A production service has started making unusual outbound calls, and a neighboring service is returning intermittent authorization failures. You suspect one workload may be compromised, but you cannot take the whole platform offline.