Signed in asM. HalloranCompliance officer · Compliance/BSAThe console in full: every actor, every event, the adjudication queue, and the actions on the pending policy proposal.
Provenance · one movement, end to end
D. Whitfield — paste to M365 Copilot
Aug 13, 2026 at 2:35 PM · Week 10 · event ad8e9acf-0126-4a9e-be3c-898a2e1f87fdActor
D. Whitfield — Senior commercial lender, Commercial Lending · Lending role groupThe role group is what the policy engine resolves against; the department is what the console cuts by. The event carries both, so no projection has to join.
Content
Draft a decline letter for Halima Lindholm (SSN 511-54-1213, primary account 00419314). Reason: insufficient operating cash flow over the trailing twelve months.
proved by a checksum or a format rule · matched by a pattern, which is a shape, or by the taxonomy or the institution’s dictionary, which are vocabulary markers — neither is a proof
| Data class | Offsets | Proof | Detector |
|---|---|---|---|
| Member PII | 27–42 | pattern match — a shape, not a proof | cmb-member-pii |
| SSN / Tax ID | 48–59 | SSN format rule | val-ssn |
| Account Numbers | 77–85 | pattern match — a shape, not a proof | pat-account |
Decision
Redact under policy v5, in force from Aug 3, 2026.The cells that decided it, for the Lending role group: Member PII — Redact; SSN / Tax ID — Warn; Account Numbers — Tokenize.
Transform
Redact · 2 span(s) masked, 1 replaced by a format-preserving token.Re-derived here from the stored spans, not read from a stored copy — a redaction that cannot be reproduced from the record is a redaction an examiner cannot check.
Draft a decline letter for ███████████████ (SSN ███████████, primary account ████████). Reason: insufficient operating cash flow over the trailing twelve months.
Destination
M365 Copilot — enterprise, sanctionedThe enterprise tenant, allow-listed per data class — sanctioned is not the same as unrestricted.
Member PIIallowedPermitted; the tenant is contracted and in scope for the institution’s information security program.SSN / Tax IDrefusedRefused as typed. No business case has been recorded for a tax identifier in a chat surface; a masked one carries no identifier.Account NumbersallowedPermitted; tokenized wherever the grid says tokenize — format preserved, value substituted.
SSN / Tax ID would have been refused here, and left in masked form. The transform is what made this submission allowable — which is the argument for preview-and-confirm over a flat block, stated as a fact about one event rather than as a benefit in a deck.Outcome
No coaching outcome: the mode did not put a card in front of anybody.Not adjudicated. The absence means something: precision is computed over the adjudicated sample only, and an unreviewed event is not evidence of anything.
The record
- captured Aug 13, 2026 at 2:35 PMD. Whitfield (Senior commercial lender, Commercial Lending) — paste to M365 Copilot.
- classified Aug 13, 2026 at 2:35 PM3 spans in member_pii, ssn_tax_id, account_numbers; proof recorded on each span.
- decided Aug 13, 2026 at 2:35 PMredact under policy v5, from the member_pii cell for the lending role group.
- transformed Aug 13, 2026 at 2:35 PMRedacted under the member_pii cell: 2 span(s) masked, 1 replaced by a format-preserving token. The tokenize option is on for the account_numbers cell in the lending role group under v5.
- submitted Aug 13, 2026 at 2:35 PMSubmitted to M365 Copilot after transformation; the original text was not sent.
The same chain in JSON: /api/v1/events?id=ad8e9acf…
Events · the log itself
76 events matching D. Whitfield · trailing 30 days
Jul 16 – Aug 14, 2026. Every row drills to the full provenance chain, and every state on this page — filters, page and drill alike — is a URL you can paste to a colleague. The same query as JSON: /api/v1/events?actor=p-whitfield&scope=windowWho sent them — 1 person across 76 events
| When | Who | Channel · destination | Classes | Decision | Outcome | |
|---|---|---|---|---|---|---|
| Aug 14, 2026 at 12:13 PMWeek 10 | D. WhitfieldCommercial Lending | promptChatGPT (personal) | Member PII, Account Numbers | Redactv5 | — | Chain |
| Aug 14, 2026 at 10:42 AMWeek 10 | D. WhitfieldCommercial Lending | promptClaude.ai (personal) | Member PII, SSN / Tax ID, Account Numbers | Redactv5 | — | Chain |
| Aug 14, 2026 at 9:07 AMWeek 10 | D. WhitfieldCommercial Lending | promptChatGPT (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 13, 2026 at 3:25 PMWeek 10 | D. WhitfieldCommercial Lending | promptChatGPT (personal) | SSN / Tax ID | Warnv5 | transformed | Chain |
| Aug 13, 2026 at 2:35 PMWeek 10 | D. WhitfieldCommercial Lending | pasteM365 Copilot | Member PII, SSN / Tax ID, Account Numbers | Redactv5 | — | Chain |
| Aug 13, 2026 at 2:31 PMWeek 10 | D. WhitfieldCommercial Lending | pasteChatGPT (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 13, 2026 at 1:52 PMWeek 10 | D. WhitfieldCommercial Lending | pasteChatGPT (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 13, 2026 at 11:54 AMWeek 10 | D. WhitfieldCommercial Lending | uploadChatGPT (personal) | Loan Files | Monitorv5 | — | Chain |
| Aug 13, 2026 at 8:29 AMWeek 10 | D. WhitfieldCommercial Lending | promptPerplexity | Account Numbers | Tokenizev5 | — | Chain |
| Aug 12, 2026 at 5:55 PMWeek 10 | D. WhitfieldCommercial Lending | promptChatGPT (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 12, 2026 at 12:01 PMWeek 10 | D. WhitfieldCommercial Lending | promptChatGPT (personal) | Account Numbers | Tokenizev5 | — | Chain |
| Aug 12, 2026 at 10:47 AMWeek 10 | D. WhitfieldCommercial Lending | promptChatGPT (personal) | Credit Memos, Member PII | Redactv5 | — | Chain |
| Aug 11, 2026 at 4:15 PMWeek 10 | D. WhitfieldCommercial Lending | promptPerplexity | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 11, 2026 at 12:03 PMWeek 10 | D. WhitfieldCommercial Lending | promptChatGPT (personal) | Member PII, Account Numbers | Redactv5 | — | Chain |
| Aug 11, 2026 at 10:35 AMWeek 10 | D. WhitfieldCommercial Lending | pasteChatGPT (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 11, 2026 at 9:04 AMWeek 10 | D. WhitfieldCommercial Lending | promptGemini Advanced | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 11, 2026 at 8:25 AMWeek 10 | D. WhitfieldCommercial Lending | pasteClaude.ai (personal) | Member PII, SSN / Tax ID, Account Numbers | Redactv5 | — | Chain |
| Aug 10, 2026 at 4:24 PMWeek 10 | D. WhitfieldCommercial Lending | uploadClaude.ai (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 10, 2026 at 11:59 AMWeek 10 | D. WhitfieldCommercial Lending | uploadClaude.ai (personal) | Loan Files | Monitorv5 | — | Chain |
| Aug 10, 2026 at 10:07 AMWeek 10 | D. WhitfieldCommercial Lending | uploadChatGPT (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 10, 2026 at 8:36 AMWeek 10 | D. WhitfieldCommercial Lending | pasteChatGPT (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 10, 2026 at 8:27 AMWeek 10 | D. WhitfieldCommercial Lending | promptGemini Advanced | Account Numbers | Tokenizev5 | —true positive | Chain |
| Aug 7, 2026 at 5:55 PMWeek 9 | D. WhitfieldCommercial Lending | uploadChatGPT (personal) | Loan Files | Monitorv5 | — | Chain |
| Aug 7, 2026 at 5:41 PMWeek 9 | D. WhitfieldCommercial Lending | promptClaude.ai (personal) | Credit Memos, Member PII | Redactv5 | —true positive | Chain |
| Aug 7, 2026 at 4:42 PMWeek 9 | D. WhitfieldCommercial Lending | pastePerplexity | Loan Files, Member PII | Redactv5 | — | Chain |