1,144 detections in 3,805 AI interactions — 302 stopped, 337 transformed, 505 sent as typed
Trailing Jul 16 – Aug 14, 2026. 30.1% of AI use carried a sensitive class — discovery counts every interaction, detection counts the subset, and the two are never divided into one another without saying so. Every figure below opens the events behind it, filtered to exactly what it counted and over this same window.A detection is not an exfiltration. Blocked, redirected and abandoned submissions reached no destination; transformed ones reached it with every detected span masked or tokenized and the original text withheld; overridden and monitored ones went as typed.
An event can carry several classes, so class instances outnumber detections: 1144 detections in this window carried 1847 class instances, of which 1840 fall in the six classes the tiles draw. A loan application carrying a name, a tax identifier and an account number is one detection and three instances. The two figures are never divided into one another.
Where AI happens here
Ranked by interactions over the window. Severity is an assessment somebody performed, recorded on the registry — which is why an unassessed tool carries no chip rather than a green one. Each row opens the detections behind it — the events that carried a data class, which is the middle figure on the row; interactions are the discovery denominator and carry no chain of their own.Usage and detection, kept apart
Each dated rule is a policy version taking effect. Historical events carry the version that decided them, so tightening a policy never rewrites what came before it.Weeks 1 to 10 of the pilot, Week 1 to Week 10.
What the log says, in four quadrants
Adverse and favorable looking back, risk and opportunity looking forward. Every one of these is computed from the event log and drills to the events behind it — a control product that only ever reports bad news teaches its buyer to stop opening it.V. Sokolov (IT contractor, IT) submitted one API Keys / Creds value to Claude.ai (personal) in weeks 5, 6, 8 — 3 attempts inside 30 days, decided monitor then block.
Attempts3First to last21 daysThreshold3Open in coaching AdverseL. Tran sent Board Materials outside working hoursL. Tran (Operations specialist, Retail & Branch Ops) made an upload to Gemini Advanced at 23:10 on 2026-08-08, outside the bank's working time. The submission was held while classification ran.
Events outside working hours1WeekWeek 9Open in coachingWarned events were overridden 22% of the time in week 5 and 11% in week 10 — 11 points, counted out of 12 overrides in 107 warnings, and under the 15% target. The fall dates from the v3 tuning of 2026-07-13.
Week 522%Week 1011%Fall11 pointsTarget15%Open in coaching FavorablePrecision 93.3%, false-positive rate 6.7%112 of 120 adjudicated detections were marked true and 8 false, which is 93.3% precision against a 90% target and a 6.7% false-positive rate under the 8% ceiling, marked by two officers (M. Halloran 60, Y. Abadi 60). The errors are in the queue, named and counted. Recall and Coverage are not measured here at all.
Adjudicated120False positives8Precision93.3%False-positive rate6.7%Open in triageLoan Files went from 74 detections in week 9 to 97 in week 10 — a 31% rise against a 25% threshold, with Commercial Lending carrying 60% of the latest week.
Week 974Week 1097Week on week31%Threshold25%Open in events RiskDeepSeek is in use and has never been assessedDeepSeek appeared in discovery in week 10 with 3 users and 9 interactions. It carries no severity rating, because the assessment step has not been performed.
Users3 usersInteractions9Discovered in weekWeek 10Open in toolsRedirect acceptance: 68% — 126 redirected of 185 warned events, weeks 9 and 10. Warned events ended in the coach card's redirect to the internal assistant rather than overriding or abandoning. That is the computed case behind v6, proposed 2026-08-10 and not in force: advance Retail & Branch Ops to warn on Member PII. It is unapproved — the approver is not the proposer.
Redirect acceptance68%redirected (weeks 9 and 10)126warned events (weeks 9 and 10)185Threshold for the case60%Open in policies Opportunity41% of warned Lending events chose redact and continueSafe-transform adoption, Lending: 41% — 55 transformed of 135 warned Lending events, trailing 30 days. That is the case for switching the tokenize option on for Account Numbers in the 6 role groups still without it. Adoption is measured, not assumed — and this is a different measure from the 41% pilot-to-date redirect share, which is why both carry their own denominators.
Safe-transform adoption, Lending41%transformed (trailing 30 days)55warned Lending events (trailing 30 days)135Threshold for the case35%Role groups without the option6 groupsOpen in policiesWeek 10 compliance brief
Week 10: Loan Files up 31%, override rate 11%
Loan Files rose 31% week on week, to 291 events in the window. The override rate is 11% in Week 10 against a 15% target, 11 points below its Week 5 rate.