Signed in asM. HalloranCompliance officer · Compliance/BSAThe console in full: every actor, every event, the adjudication queue, and the actions on the pending policy proposal.
Provenance · one movement, end to end
J. Kowalczyk — prompt to Gemini Advanced
Jun 16, 2026 at 5:26 PM · Week 2 · event ff3ce83c-bc8e-418a-a50e-88f0261558e2Actor
J. Kowalczyk — Branch manager, Retail & Branch Ops · Operations role groupThe role group is what the policy engine resolves against; the department is what the console cuts by. The event carries both, so no projection has to join.
Content
Why does the nightly job fail with this credential set? AKIAAAQAEQAQAAYMQQQA has read access to the statements bucket.
proved by a checksum or a format rule · matched by a pattern, which is a shape, or by the taxonomy or the institution’s dictionary, which are vocabulary markers — neither is a proof
| Data class | Offsets | Proof | Detector |
|---|---|---|---|
| API Keys / Creds | 56–76 | pattern match — a shape, not a proof | pat-credential |
Decision
Monitor under policy v1, in force from Jun 8, 2026.The cells that decided it, for the Operations role group: API Keys / Creds — Monitor.
Transform
No transform ran. The content was decided and left as it was.
Destination
Gemini Advanced — public, assessedReached most often through personal Google accounts on bank hardware.
Outcome
No coaching outcome: the mode did not put a card in front of anybody.Not adjudicated. The absence means something: precision is computed over the adjudicated sample only, and an unreviewed event is not evidence of anything.
The record
- captured Jun 16, 2026 at 5:26 PMJ. Kowalczyk (Branch manager, Retail & Branch Ops) — prompt to Gemini Advanced.
- classified Jun 16, 2026 at 5:26 PM1 span in api_keys_creds; proof recorded on each span.
- decided Jun 16, 2026 at 5:26 PMmonitor under policy v1, from the api_keys_creds cell for the operations role group.
- submitted Jun 16, 2026 at 5:26 PMSubmitted to Gemini Advanced as typed.
The same chain in JSON: /api/v1/events?id=ff3ce83c…
Events · the log itself
43 events matching J. Kowalczyk · policy v1
Jun 8 – Aug 14, 2026. Every row drills to the full provenance chain, and every state on this page — filters, page and drill alike — is a URL you can paste to a colleague. The same query as JSON: /api/v1/events?actor=p-kowalczyk&version=v1Who sent them — 1 person across 43 events
| When | Who | Channel · destination | Classes | Decision | Outcome | |
|---|---|---|---|---|---|---|
| Jul 2, 2026 at 4:23 PMWeek 4 | J. KowalczykRetail & Branch Ops | promptChatGPT (personal) | Member PII | Monitorv1 | — | Chain |
| Jul 2, 2026 at 12:19 PMWeek 4 | J. KowalczykRetail & Branch Ops | promptChatGPT (personal) | Member PII, Account Numbers | Monitorv1 | — | Chain |
| Jul 1, 2026 at 2:56 PMWeek 4 | J. KowalczykRetail & Branch Ops | promptGemini Advanced | Member PII, Account Numbers | Monitorv1 | — | Chain |
| Jul 1, 2026 at 12:35 PMWeek 4 | J. KowalczykRetail & Branch Ops | pasteClaude.ai (personal) | SSN / Tax ID | Monitorv1 | — | Chain |
| Jun 30, 2026 at 4:47 PMWeek 4 | J. KowalczykRetail & Branch Ops | promptChatGPT (personal) | Account Numbers | Monitorv1 | — | Chain |
| Jun 29, 2026 at 8:30 AMWeek 4 | J. KowalczykRetail & Branch Ops | promptChatGPT (personal) | Account Numbers | Monitorv1 | — | Chain |
| Jun 26, 2026 at 5:20 PMWeek 3 | J. KowalczykRetail & Branch Ops | pasteChatGPT (personal) | Account Numbers | Monitorv1 | — | Chain |
| Jun 26, 2026 at 4:51 PMWeek 3 | J. KowalczykRetail & Branch Ops | promptPerplexity | Member PII, Account Numbers | Monitorv1 | — | Chain |
| Jun 25, 2026 at 4:32 PMWeek 3 | J. KowalczykRetail & Branch Ops | promptGemini Advanced | Account Numbers, Member PII | Monitorv1 | — | Chain |
| Jun 25, 2026 at 3:46 PMWeek 3 | J. KowalczykRetail & Branch Ops | promptChatGPT (personal) | SSN / Tax ID | Monitorv1 | — | Chain |
| Jun 25, 2026 at 11:57 AMWeek 3 | J. KowalczykRetail & Branch Ops | pasteChatGPT (personal) | Member PII | Monitorv1 | — | Chain |
| Jun 24, 2026 at 3:49 PMWeek 3 | J. KowalczykRetail & Branch Ops | pasteChatGPT (personal) | Account Numbers | Monitorv1 | — | Chain |
| Jun 24, 2026 at 9:28 AMWeek 3 | J. KowalczykRetail & Branch Ops | pasteClaude.ai (personal) | Member PII | Monitorv1 | — | Chain |
| Jun 23, 2026 at 8:15 AMWeek 3 | J. KowalczykRetail & Branch Ops | promptChatGPT (personal) | Account Numbers | Monitorv1 | — | Chain |
| Jun 22, 2026 at 5:53 PMWeek 3 | J. KowalczykRetail & Branch Ops | pasteM365 Copilot | Member PII, Account Numbers | Monitorv1 | — | Chain |
| Jun 22, 2026 at 3:27 PMWeek 3 | J. KowalczykRetail & Branch Ops | pasteClaude.ai (personal) | Account Numbers, Member PII | Monitorv1 | — | Chain |
| Jun 22, 2026 at 3:06 PMWeek 3 | J. KowalczykRetail & Branch Ops | pasteClaude.ai (personal) | Member PII | Monitorv1 | — | Chain |
| Jun 22, 2026 at 2:38 PMWeek 3 | J. KowalczykRetail & Branch Ops | promptClaude.ai (personal) | Account Numbers | Monitorv1 | — | Chain |
| Jun 19, 2026 at 10:14 AMWeek 2 | J. KowalczykRetail & Branch Ops | promptChatGPT (personal) | Member PII | Monitorv1 | — | Chain |
| Jun 18, 2026 at 1:09 PMWeek 2 | J. KowalczykRetail & Branch Ops | pasteClaude.ai (personal) | Member PII, Account Numbers | Monitorv1 | — | Chain |
| Jun 17, 2026 at 3:08 PMWeek 2 | J. KowalczykRetail & Branch Ops | pasteClaude.ai (personal) | Member PII, Account Numbers | Monitorv1 | — | Chain |
| Jun 16, 2026 at 5:26 PMWeek 2 | J. KowalczykRetail & Branch Ops | promptGemini Advanced | API Keys / Creds | Monitorv1 | — | Chain |
| Jun 16, 2026 at 2:07 PMWeek 2 | J. KowalczykRetail & Branch Ops | promptChatGPT (personal) | Member PII | Monitorv1 | — | Chain |
| Jun 16, 2026 at 9:34 AMWeek 2 | J. KowalczykRetail & Branch Ops | pasteClaude.ai (personal) | Account Numbers, Member PII | Monitorv1 | — | Chain |
| Jun 16, 2026 at 8:37 AMWeek 2 | J. KowalczykRetail & Branch Ops | promptGemini Advanced | Member PII, Account Numbers | Monitorv1 | — | Chain |