Signed in asM. HalloranCompliance officer · Compliance/BSAThe console in full: every actor, every event, the adjudication queue, and the actions on the pending policy proposal.
Provenance · one movement, end to end
R. Okafor — prompt to M365 Copilot
Jul 9, 2026 at 10:59 AM · Week 5 · event 15c3f149-a000-4547-99e6-16aab7979fd4Actor
R. Okafor — Commercial lender, Commercial Lending · Lending role groupThe role group is what the policy engine resolves against; the department is what the console cuts by. The event carries both, so no projection has to join.
Content
The card ending in this number keeps declining: 4539673909102119. The customer is Meredith Kovalenko. What should the branch check first?
proved by a checksum or a format rule · matched by a pattern, which is a shape, or by the taxonomy or the institution’s dictionary, which are vocabulary markers — neither is a proof
| Data class | Offsets | Proof | Detector |
|---|---|---|---|
| Account Numbers | 48–64 | Luhn checksum | val-luhn |
| Member PII | 82–100 | pattern match — a shape, not a proof | cmb-member-pii |
Decision
Warn under policy v2, in force from Jul 6, 2026.The cells that decided it, for the Lending role group: Account Numbers — Monitor; Member PII — Warn.
Transform
Redact · 2 span(s) masked, 0 replaced by a format-preserving token.Re-derived here from the stored spans, not read from a stored copy — a redaction that cannot be reproduced from the record is a redaction an examiner cannot check.
The card ending in this number keeps declining: ████████████████. The customer is ██████████████████. What should the branch check first?
Destination
M365 Copilot — enterprise, sanctionedThe enterprise tenant, allow-listed per data class — sanctioned is not the same as unrestricted.
Account NumbersallowedPermitted; tokenized wherever the grid says tokenize — format preserved, value substituted.Member PIIallowedPermitted; the tenant is contracted and in scope for the institution’s information security program.
Outcome
The user transformed after the card.Not adjudicated. The absence means something: precision is computed over the adjudicated sample only, and an unreviewed event is not evidence of anything.
The record
- captured Jul 9, 2026 at 10:59 AMR. Okafor (Commercial lender, Commercial Lending) — prompt to M365 Copilot.
- classified Jul 9, 2026 at 10:59 AM2 spans in account_numbers, member_pii; proof recorded on each span.
- decided Jul 9, 2026 at 10:59 AMwarn under policy v2, from the member_pii cell for the lending role group.
- transformed Jul 9, 2026 at 10:59 AMSafe transform taken on the coach card: 2 span(s) masked in place by offset. Warn does not rewrite anything by itself — the person chose this. The tokenize option is not on for the account_numbers cell in the lending role group under v2, so every span is masked.
- submitted Jul 9, 2026 at 10:59 AMSubmitted to M365 Copilot after transformation; the original text was not sent.
The same chain in JSON: /api/v1/events?id=15c3f149…
Events · the log itself
200 events matching policy v2
Jun 8 – Aug 14, 2026. Every row drills to the full provenance chain, and every state on this page — filters, page and drill alike — is a URL you can paste to a colleague. The same query as JSON: /api/v1/events?version=v2Who sent them — 21 people across 200 events
H. DelacroixCredit Administration22A. BergströmCredit Administration21M. RamaswamyCommercial Lending20N. OyelaranCredit Administration19J. KowalczykRetail & Branch Ops17D. WhitfieldCommercial Lending14B. MwangiFinance11L. TranRetail & Branch Ops10
The 8 people carrying the most of this filter, of 21. Narrow the Person control above to read one of them alone.
| When | Who | Channel · destination | Classes | Decision | Outcome | |
|---|---|---|---|---|---|---|
| Jul 9, 2026 at 3:05 PMWeek 5 | T. BeaulieuCommercial Lending | pasteClaude.ai (personal) | Account Numbers, Member PII | Warnv2 | redirected | Chain |
| Jul 9, 2026 at 2:50 PMWeek 5 | M. RamaswamyCommercial Lending | pasteChatGPT (personal) | Loan Files, Member PII | Warnv2 | overridden | Chain |
| Jul 9, 2026 at 2:49 PMWeek 5 | N. OyelaranCredit Administration | pasteClaude.ai (personal) | Credit Memos | Monitorv2 | — | Chain |
| Jul 9, 2026 at 2:48 PMWeek 5 | D. WhitfieldCommercial Lending | promptChatGPT (personal) | Loan Files, Member PII | Warnv2 | redirected | Chain |
| Jul 9, 2026 at 2:47 PMWeek 5 | I. QuinteroRetail & Branch Ops | promptChatGPT (personal) | Account Numbers, Member PII | Monitorv2 | — | Chain |
| Jul 9, 2026 at 2:16 PMWeek 5 | F. DuarteIT | pasteGemini Advanced | API Keys / Creds | Monitorv2 | — | Chain |
| Jul 9, 2026 at 1:35 PMWeek 5 | M. RamaswamyCommercial Lending | uploadChatGPT (personal) | Credit Memos, Member PII | Warnv2 | redirected | Chain |
| Jul 9, 2026 at 1:27 PMWeek 5 | P. NakamuraRetail & Branch Ops | pasteGemini Advanced | Account Numbers | Monitorv2 | — | Chain |
| Jul 9, 2026 at 1:10 PMWeek 5 | P. NakamuraRetail & Branch Ops | pasteChatGPT (personal) | Account Numbers | Monitorv2 | — | Chain |
| Jul 9, 2026 at 1:05 PMWeek 5 | N. OyelaranCredit Administration | promptChatGPT (personal) | SSN / Tax ID | Warnv2 | redirected | Chain |
| Jul 9, 2026 at 1:04 PMWeek 5 | L. TranRetail & Branch Ops | pasteClaude.ai (personal) | Member PII | Monitorv2 | — | Chain |
| Jul 9, 2026 at 12:59 PMWeek 5 | H. DelacroixCredit Administration | promptPerplexity | Credit Memos, Member PII | Warnv2 | transformed | Chain |
| Jul 9, 2026 at 12:40 PMWeek 5 | D. WhitfieldCommercial Lending | uploadChatGPT (personal) | Loan Files, Member PII | Warnv2 | abandoned | Chain |
| Jul 9, 2026 at 12:29 PMWeek 5 | I. QuinteroRetail & Branch Ops | promptGemini Advanced | Account Numbers | Monitorv2 | — | Chain |
| Jul 9, 2026 at 12:05 PMWeek 5 | J. KowalczykRetail & Branch Ops | promptMicrosoft Copilot (consumer) | Member PII, Account Numbers | Monitorv2 | — | Chain |
| Jul 9, 2026 at 11:37 AMWeek 5 | N. OyelaranCredit Administration | pasteGemini Advanced | Account Numbers, Member PII | Warnv2 | redirected | Chain |
| Jul 9, 2026 at 11:23 AMWeek 5 | N. OyelaranCredit Administration | promptClaude.ai (personal) | Credit Memos, Member PII | Warnv2 | overridden | Chain |
| Jul 9, 2026 at 11:01 AMWeek 5 | E. LindqvistFinance | pasteGemini Advanced | Account Numbers | Monitorv2 | — | Chain |
| Jul 9, 2026 at 10:59 AMWeek 5 | R. OkaforCommercial Lending | promptM365 Copilot | Account Numbers, Member PII | Warnv2 | transformed | Chain |
| Jul 9, 2026 at 10:47 AMWeek 5 | M. RamaswamyCommercial Lending | uploadChatGPT (personal) | Credit Memos, Member PII | Warnv2 | redirected | Chain |
| Jul 9, 2026 at 10:45 AMWeek 5 | D. WhitfieldCommercial Lending | promptMicrosoft Copilot (consumer) | Account Numbers | Monitorv2 | — | Chain |
| Jul 9, 2026 at 10:19 AMWeek 5 | H. DelacroixCredit Administration | promptChatGPT (personal) | Member PII, SSN / Tax ID, Account Numbers | Warnv2 | transformed | Chain |
| Jul 9, 2026 at 9:55 AMWeek 5 | N. OyelaranCredit Administration | uploadChatGPT (personal) | Loan Files, Member PII | Warnv2 | abandoned | Chain |
| Jul 9, 2026 at 9:47 AMWeek 5 | A. BergströmCredit Administration | pasteGemini Advanced | Member PII, Account Numbers | Warnv2 | transformed | Chain |
| Jul 9, 2026 at 9:41 AMWeek 5 | L. TranRetail & Branch Ops | pasteClaude.ai (personal) | Member PII | Monitorv2 | — | Chain |
Showing 51–75 of 200 · page 3 of 8⇤ First← PreviousNext →Last ⇥