Signed in asM. HalloranCompliance officer · Compliance/BSAThe console in full: every actor, every event, the adjudication queue, and the actions on the pending policy proposal.
Provenance · one movement, end to end
A. Bergström — paste to M365 Copilot
Aug 14, 2026 at 10:29 AM · Week 10 · event 3a10b6b1-d817-4321-89cb-372f75743147Actor
A. Bergström — Senior credit analyst, Credit Administration · Credit role groupThe role group is what the policy engine resolves against; the department is what the console cuts by. The event carries both, so no projection has to join.
Content
Pull the payment history out of the file for loan CL-2026-79691 and tell me whether Naomi Ibekwe has been late more than twice in the last two years.
proved by a checksum or a format rule · matched by a pattern, which is a shape, or by the taxonomy or the institution’s dictionary, which are vocabulary markers — neither is a proof
| Data class | Offsets | Proof | Detector |
|---|---|---|---|
| Loan Files | 50–63 | pattern match — a shape, not a proof | pat-loan |
| Member PII | 84–96 | pattern match — a shape, not a proof | cmb-member-pii |
Decision
Warn under policy v5, in force from Aug 3, 2026.The cells that decided it, for the Credit role group: Loan Files — Monitor; Member PII — Warn.
Transform
No transform ran. The content was decided and left as it was.
Destination
M365 Copilot — enterprise, sanctionedThe enterprise tenant, allow-listed per data class — sanctioned is not the same as unrestricted.
Loan FilesallowedPermitted; the tenant is in scope for the institution’s information security program.Member PIIallowedPermitted; the tenant is contracted and in scope for the institution’s information security program.
Outcome
The user abandoned after the card.Triage marked it true positive — Y. Abadi, Aug 14, 2026 at 5:30 PM. Open in Triage
The record
- captured Aug 14, 2026 at 10:29 AMA. Bergström (Senior credit analyst, Credit Administration) — paste to M365 Copilot.
- classified Aug 14, 2026 at 10:29 AM2 spans in loan_files, member_pii; proof recorded on each span.
- decided Aug 14, 2026 at 10:29 AMwarn under policy v5, from the member_pii cell for the credit role group.
- abandoned Aug 14, 2026 at 10:29 AMUser closed the prompt after the coach card. Nothing reached M365 Copilot.
- adjudicated Aug 14, 2026 at 5:30 PMMarked a true positive by Y. Abadi in triage.
The same chain in JSON: /api/v1/events?id=3a10b6b1…
Events · the log itself
65 events matching A. Bergström · policy v5
Jun 8 – Aug 14, 2026. Every row drills to the full provenance chain, and every state on this page — filters, page and drill alike — is a URL you can paste to a colleague. The same query as JSON: /api/v1/events?actor=p-bergstrom&version=v5Who sent them — 1 person across 65 events
| When | Who | Channel · destination | Classes | Decision | Outcome | |
|---|---|---|---|---|---|---|
| Aug 14, 2026 at 5:21 PMWeek 10 | A. BergströmCredit Administration | uploadClaude.ai (personal) | Credit Memos, Member PII | Warnv5 | transformed | Chain |
| Aug 14, 2026 at 4:26 PMWeek 10 | A. BergströmCredit Administration | promptChatGPT (personal) | Account Numbers, Member PII | Warnv5 | overridden | Chain |
| Aug 14, 2026 at 2:48 PMWeek 10 | A. BergströmCredit Administration | promptGemini Advanced | Member PII | Warnv5 | transformed | Chain |
| Aug 14, 2026 at 2:26 PMWeek 10 | A. BergströmCredit Administration | pasteChatGPT (personal) | Credit Memos, Member PII | Warnv5 | redirected | Chain |
| Aug 14, 2026 at 10:29 AMWeek 10 | A. BergströmCredit Administration | pasteM365 Copilot | Loan Files, Member PII | Warnv5 | abandonedtrue positive | Chain |
| Aug 14, 2026 at 9:51 AMWeek 10 | A. BergströmCredit Administration | uploadMicrosoft Copilot (consumer) | Credit Memos | Monitorv5 | — | Chain |
| Aug 14, 2026 at 9:42 AMWeek 10 | A. BergströmCredit Administration | promptChatGPT (personal) | Loan Files, Member PII | Warnv5 | redirected | Chain |
| Aug 13, 2026 at 5:30 PMWeek 10 | A. BergströmCredit Administration | promptChatGPT (personal) | Credit Memos, Member PII | Warnv5 | redirected | Chain |
| Aug 13, 2026 at 3:36 PMWeek 10 | A. BergströmCredit Administration | pasteClaude.ai (personal) | Credit Memos, Member PII | Warnv5 | redirected | Chain |
| Aug 13, 2026 at 3:01 PMWeek 10 | A. BergströmCredit Administration | uploadChatGPT (personal) | Credit Memos, Member PII | Warnv5 | redirected | Chain |
| Aug 13, 2026 at 2:41 PMWeek 10 | A. BergströmCredit Administration | promptClaude.ai (personal) | Loan Files, Member PII | Warnv5 | overridden | Chain |
| Aug 13, 2026 at 2:39 PMWeek 10 | A. BergströmCredit Administration | promptChatGPT (personal) | Loan Files | Monitorv5 | — | Chain |
| Aug 13, 2026 at 1:48 PMWeek 10 | A. BergströmCredit Administration | uploadClaude.ai (personal) | Loan Files, Member PII | Warnv5 | redirected | Chain |
| Aug 13, 2026 at 9:38 AMWeek 10 | A. BergströmCredit Administration | pasteClaude.ai (personal) | Loan Files, Member PII | Warnv5 | abandoned | Chain |
| Aug 13, 2026 at 9:34 AMWeek 10 | A. BergströmCredit Administration | pasteChatGPT (personal) | Account Numbers, Member PII | Warnv5 | redirected | Chain |
| Aug 12, 2026 at 5:22 PMWeek 10 | A. BergströmCredit Administration | pasteChatGPT (personal) | Member PII | Warnv5 | redirected | Chain |
| Aug 12, 2026 at 5:08 PMWeek 10 | A. BergströmCredit Administration | pasteChatGPT (personal) | Member PII | Warnv5 | abandoned | Chain |
| Aug 12, 2026 at 4:31 PMWeek 10 | A. BergströmCredit Administration | pasteClaude.ai (personal) | Member PII, SSN / Tax ID, Account Numbers | Warnv5 | transformed | Chain |
| Aug 12, 2026 at 4:12 PMWeek 10 | A. BergströmCredit Administration | uploadClaude.ai (personal) | Loan Files, Member PII | Warnv5 | redirected | Chain |
| Aug 12, 2026 at 1:08 PMWeek 10 | A. BergströmCredit Administration | pastePerplexity | Member PII | Warnv5 | redirected | Chain |
| Aug 12, 2026 at 12:05 PMWeek 10 | A. BergströmCredit Administration | uploadChatGPT (personal) | Loan Files, Member PII | Warnv5 | redirected | Chain |
| Aug 12, 2026 at 11:08 AMWeek 10 | A. BergströmCredit Administration | promptChatGPT (personal) | Loan Files, Member PII | Warnv5 | overridden | Chain |
| Aug 12, 2026 at 10:28 AMWeek 10 | A. BergströmCredit Administration | promptChatGPT (personal) | Member PII, Account Numbers | Warnv5 | redirected | Chain |
| Aug 11, 2026 at 3:47 PMWeek 10 | A. BergströmCredit Administration | promptMicrosoft Copilot (consumer) | Loan Files, Member PII | Warnv5 | redirected | Chain |
| Aug 11, 2026 at 2:38 PMWeek 10 | A. BergströmCredit Administration | pasteChatGPT (personal) | Loan Files, Member PII | Warnv5 | overridden | Chain |