Tagged domain-at-the-gate