Signed in asM. HalloranCompliance officer · Compliance/BSAThe console in full: every actor, every event, the adjudication queue, and the actions on the pending policy proposal.
Provenance · one movement, end to end
F. Duarte — prompt to Claude.ai (personal)
Aug 14, 2026 at 1:42 PM · Week 10 · event 042c9b00-4cd1-4371-a95a-6b0c5dea5aedActor
F. Duarte — IT director, IT · IT role groupThe role group is what the policy engine resolves against; the department is what the console cuts by. The event carries both, so no projection has to join.
Content
Why does the nightly job fail with this credential set? AKIAQI2MAAYIRAYIQYYQ has read access to the statements bucket.
proved by a checksum or a format rule · matched by a pattern, which is a shape, or by the taxonomy or the institution’s dictionary, which are vocabulary markers — neither is a proof
| Data class | Offsets | Proof | Detector |
|---|---|---|---|
| API Keys / Creds | 56–76 | pattern match — a shape, not a proof | pat-credential |
Decision
Block under policy v5, in force from Aug 3, 2026.The cells that decided it, for the IT role group: API Keys / Creds — Block.
Transform
No transform ran. The content was decided and left as it was.
Destination
Claude.ai (personal) — public, assessedPersonal accounts. Heavily used in IT and Credit Administration.
Outcome
No coaching outcome: the mode did not put a card in front of anybody.Not adjudicated. The absence means something: precision is computed over the adjudicated sample only, and an unreviewed event is not evidence of anything.
The record
- captured Aug 14, 2026 at 1:42 PMF. Duarte (IT director, IT) — prompt to Claude.ai (personal).
- classified Aug 14, 2026 at 1:42 PM1 span in api_keys_creds; proof recorded on each span.
- decided Aug 14, 2026 at 1:42 PMblock under policy v5, from the api_keys_creds cell for the it role group.
- blocked Aug 14, 2026 at 1:42 PMSubmission stopped before it left the browser. Nothing reached Claude.ai (personal).
The same chain in JSON: /api/v1/events?id=042c9b00…
Events · the log itself
585 events matching policy v5
Jun 8 – Aug 14, 2026. Every row drills to the full provenance chain, and every state on this page — filters, page and drill alike — is a URL you can paste to a colleague. The same query as JSON: /api/v1/events?version=v5Who sent them — 22 people across 585 events
H. DelacroixCredit Administration69N. OyelaranCredit Administration67A. BergströmCredit Administration65D. WhitfieldCommercial Lending49R. OkaforCommercial Lending41M. RamaswamyCommercial Lending38T. BeaulieuCommercial Lending35K. OseiCommercial Lending34
The 8 people carrying the most of this filter, of 22. Narrow the Person control above to read one of them alone.
| When | Who | Channel · destination | Classes | Decision | Outcome | |
|---|---|---|---|---|---|---|
| Aug 14, 2026 at 5:41 PMWeek 10 | B. MwangiFinance | pasteGemini Advanced | Member PII, Account Numbers | Monitorv5 | — | Chain |
| Aug 14, 2026 at 5:21 PMWeek 10 | A. BergströmCredit Administration | uploadClaude.ai (personal) | Credit Memos, Member PII | Warnv5 | transformed | Chain |
| Aug 14, 2026 at 4:35 PMWeek 10 | J. KowalczykRetail & Branch Ops | promptClaude.ai (personal) | Account Numbers | Monitorv5 | — | Chain |
| Aug 14, 2026 at 4:34 PMWeek 10 | T. BeaulieuCommercial Lending | uploadClaude.ai (personal) | Credit Memos, Member PII | Redactv5 | — | Chain |
| Aug 14, 2026 at 4:28 PMWeek 10 | I. QuinteroRetail & Branch Ops | promptPerplexity | Account Numbers | Monitorv5 | — | Chain |
| Aug 14, 2026 at 4:26 PMWeek 10 | A. BergströmCredit Administration | promptChatGPT (personal) | Account Numbers, Member PII | Warnv5 | overridden | Chain |
| Aug 14, 2026 at 4:08 PMWeek 10 | B. MwangiFinance | promptClaude.ai (personal) | Account Numbers | Monitorv5 | — | Chain |
| Aug 14, 2026 at 3:46 PMWeek 10 | N. OyelaranCredit Administration | pasteClaude.ai (personal) | Member PII | Warnv5 | redirected | Chain |
| Aug 14, 2026 at 3:42 PMWeek 10 | T. BeaulieuCommercial Lending | pasteChatGPT (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 14, 2026 at 3:32 PMWeek 10 | R. OkaforCommercial Lending | pasteMicrosoft Copilot (consumer) | Member PII | Redactv5 | — | Chain |
| Aug 14, 2026 at 3:29 PMWeek 10 | N. OyelaranCredit Administration | uploadGemini Advanced | Credit Memos, Member PII | Warnv5 | abandoned | Chain |
| Aug 14, 2026 at 3:29 PMWeek 10 | V. SokolovIT | promptChatGPT (personal) | API Keys / Creds | Blockv5 | —true positive | Chain |
| Aug 14, 2026 at 3:24 PMWeek 10 | B. MwangiFinance | pasteChatGPT (personal) | Account Numbers | Monitorv5 | — | Chain |
| Aug 14, 2026 at 3:23 PMWeek 10 | K. OseiCommercial Lending | uploadClaude.ai (personal) | Loan Files | Monitorv5 | — | Chain |
| Aug 14, 2026 at 3:15 PMWeek 10 | P. NakamuraRetail & Branch Ops | pasteChatGPT (personal) | Account Numbers, Member PII | Monitorv5 | — | Chain |
| Aug 14, 2026 at 3:12 PMWeek 10 | H. DelacroixCredit Administration | uploadPerplexity | Credit Memos, Member PII | Warnv5 | overridden | Chain |
| Aug 14, 2026 at 3:05 PMWeek 10 | M. RamaswamyCommercial Lending | promptChatGPT (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 14, 2026 at 2:54 PMWeek 10 | M. RamaswamyCommercial Lending | uploadClaude.ai (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 14, 2026 at 2:48 PMWeek 10 | A. BergströmCredit Administration | promptGemini Advanced | Member PII | Warnv5 | transformed | Chain |
| Aug 14, 2026 at 2:26 PMWeek 10 | A. BergströmCredit Administration | pasteChatGPT (personal) | Credit Memos, Member PII | Warnv5 | redirected | Chain |
| Aug 14, 2026 at 2:16 PMWeek 10 | K. OseiCommercial Lending | promptGemini Advanced | Credit Memos, Member PII | Redactv5 | — | Chain |
| Aug 14, 2026 at 2:14 PMWeek 10 | S. AdeyemiRetail & Branch Ops | promptChatGPT (personal) | Member PII, Account Numbers | Monitorv5 | —true positive | Chain |
| Aug 14, 2026 at 1:57 PMWeek 10 | T. BeaulieuCommercial Lending | promptChatGPT (personal) | Loan Files, Member PII | Redactv5 | —true positive | Chain |
| Aug 14, 2026 at 1:52 PMWeek 10 | R. OkaforCommercial Lending | promptChatGPT (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 14, 2026 at 1:42 PMWeek 10 | F. DuarteIT | promptClaude.ai (personal) | API Keys / Creds | Blockv5 | — | Chain |