Signed in asM. HalloranCompliance officer · Compliance/BSAThe console in full: every actor, every event, the adjudication queue, and the actions on the pending policy proposal.
Provenance · one movement, end to end
R. Okafor — paste to Microsoft Copilot (consumer)
Aug 11, 2026 at 9:13 AM · Week 10 · event 4bae38f8-620a-4ac2-846b-db27fe2923b8Actor
R. Okafor — Commercial lender, Commercial Lending · Lending role groupThe role group is what the policy engine resolves against; the department is what the console cuts by. The event carries both, so no projection has to join.
Content
Can you sanity-check the income calculation? Borrower Marcus Beauchamp, SSN 650-92-8623, account 00305905, gross monthly $14,666, two years of Schedule C attached.
proved by a checksum or a format rule · matched by a pattern, which is a shape, or by the taxonomy or the institution’s dictionary, which are vocabulary markers — neither is a proof
| Data class | Offsets | Proof | Detector |
|---|---|---|---|
| Member PII | 54–70 | pattern match — a shape, not a proof | cmb-member-pii |
| SSN / Tax ID | 76–87 | SSN format rule | val-ssn |
| Account Numbers | 97–105 | pattern match — a shape, not a proof | pat-account |
Decision
Redact under policy v5, in force from Aug 3, 2026.The cells that decided it, for the Lending role group: Member PII — Redact; SSN / Tax ID — Warn; Account Numbers — Tokenize.
Transform
Redact · 2 span(s) masked, 1 replaced by a format-preserving token.Re-derived here from the stored spans, not read from a stored copy — a redaction that cannot be reproduced from the record is a redaction an examiner cannot check.
Can you sanity-check the income calculation? Borrower ████████████████, SSN ███████████, account ████████, gross monthly $14,666, two years of Schedule C attached.
Destination
Microsoft Copilot (consumer) — public, assessedThe consumer surface, not the tenant. Easy to confuse with M365 Copilot, and often is.
Outcome
No coaching outcome: the mode did not put a card in front of anybody.Triage marked it true positive — Y. Abadi, Aug 11, 2026 at 5:30 PM. Open in Triage
The record
- captured Aug 11, 2026 at 9:13 AMR. Okafor (Commercial lender, Commercial Lending) — paste to Microsoft Copilot (consumer).
- classified Aug 11, 2026 at 9:13 AM3 spans in member_pii, ssn_tax_id, account_numbers; proof recorded on each span.
- decided Aug 11, 2026 at 9:13 AMredact under policy v5, from the member_pii cell for the lending role group.
- transformed Aug 11, 2026 at 9:13 AMRedacted under the member_pii cell: 2 span(s) masked, 1 replaced by a format-preserving token. The tokenize option is on for the account_numbers cell in the lending role group under v5.
- submitted Aug 11, 2026 at 9:13 AMSubmitted to Microsoft Copilot (consumer) after transformation; the original text was not sent.
- adjudicated Aug 11, 2026 at 5:30 PMMarked a true positive by Y. Abadi in triage.
The same chain in JSON: /api/v1/events?id=4bae38f8…
Events · the log itself
122 events matching Microsoft Copilot (consumer) · trailing 30 days
Jul 16 – Aug 14, 2026. Every row drills to the full provenance chain, and every state on this page — filters, page and drill alike — is a URL you can paste to a colleague. The same query as JSON: /api/v1/events?tool=copilot-consumer&scope=windowWho sent them — 19 people across 122 events
H. DelacroixCredit Administration18N. OyelaranCredit Administration18K. OseiCommercial Lending9J. KowalczykRetail & Branch Ops8A. BergströmCredit Administration7D. WhitfieldCommercial Lending7S. AdeyemiRetail & Branch Ops7I. QuinteroRetail & Branch Ops6
The 8 people carrying the most of this filter, of 19. Narrow the Person control above to read one of them alone.
| When | Who | Channel · destination | Classes | Decision | Outcome | |
|---|---|---|---|---|---|---|
| Aug 14, 2026 at 3:32 PMWeek 10 | R. OkaforCommercial Lending | pasteMicrosoft Copilot (consumer) | Member PII | Redactv5 | — | Chain |
| Aug 14, 2026 at 12:04 PMWeek 10 | H. DelacroixCredit Administration | promptMicrosoft Copilot (consumer) | Member PII | Warnv5 | redirected | Chain |
| Aug 14, 2026 at 10:23 AMWeek 10 | H. DelacroixCredit Administration | pasteMicrosoft Copilot (consumer) | SSN / Tax ID | Warnv5 | redirected | Chain |
| Aug 14, 2026 at 9:51 AMWeek 10 | A. BergströmCredit Administration | uploadMicrosoft Copilot (consumer) | Credit Memos | Monitorv5 | — | Chain |
| Aug 14, 2026 at 9:36 AMWeek 10 | S. AdeyemiRetail & Branch Ops | pasteMicrosoft Copilot (consumer) | Account Numbers, Member PII | Monitorv5 | — | Chain |
| Aug 13, 2026 at 4:52 PMWeek 10 | H. DelacroixCredit Administration | pasteMicrosoft Copilot (consumer) | Credit Memos, Member PII | Warnv5 | overridden | Chain |
| Aug 13, 2026 at 2:40 PMWeek 10 | S. AdeyemiRetail & Branch Ops | promptMicrosoft Copilot (consumer) | Member PII | Monitorv5 | — | Chain |
| Aug 13, 2026 at 8:34 AMWeek 10 | K. OseiCommercial Lending | pasteMicrosoft Copilot (consumer) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 12, 2026 at 5:40 PMWeek 10 | C. FerranteFinance | pasteMicrosoft Copilot (consumer) | Account Numbers | Monitorv5 | — | Chain |
| Aug 12, 2026 at 4:54 PMWeek 10 | K. OseiCommercial Lending | uploadMicrosoft Copilot (consumer) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 12, 2026 at 2:30 PMWeek 10 | G. IyerIT | pasteMicrosoft Copilot (consumer) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 12, 2026 at 11:44 AMWeek 10 | I. QuinteroRetail & Branch Ops | pasteMicrosoft Copilot (consumer) | Account Numbers | Monitorv5 | — | Chain |
| Aug 12, 2026 at 10:43 AMWeek 10 | H. DelacroixCredit Administration | promptMicrosoft Copilot (consumer) | Member PII | Warnv5 | redirected | Chain |
| Aug 12, 2026 at 9:42 AMWeek 10 | K. OseiCommercial Lending | pasteMicrosoft Copilot (consumer) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 12, 2026 at 9:21 AMWeek 10 | M. RamaswamyCommercial Lending | pasteMicrosoft Copilot (consumer) | Member PII | Redactv5 | — | Chain |
| Aug 12, 2026 at 8:58 AMWeek 10 | N. OyelaranCredit Administration | uploadMicrosoft Copilot (consumer) | Credit Memos, Member PII | Warnv5 | redirected | Chain |
| Aug 11, 2026 at 4:34 PMWeek 10 | S. AdeyemiRetail & Branch Ops | promptMicrosoft Copilot (consumer) | Account Numbers | Monitorv5 | — | Chain |
| Aug 11, 2026 at 4:09 PMWeek 10 | M. RamaswamyCommercial Lending | promptMicrosoft Copilot (consumer) | Credit Memos, Member PII | Redactv5 | — | Chain |
| Aug 11, 2026 at 3:47 PMWeek 10 | A. BergströmCredit Administration | promptMicrosoft Copilot (consumer) | Loan Files, Member PII | Warnv5 | redirected | Chain |
| Aug 11, 2026 at 2:10 PMWeek 10 | V. SokolovIT | pasteMicrosoft Copilot (consumer) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 11, 2026 at 11:31 AMWeek 10 | S. AdeyemiRetail & Branch Ops | pasteMicrosoft Copilot (consumer) | Account Numbers | Monitorv5 | — | Chain |
| Aug 11, 2026 at 9:13 AMWeek 10 | R. OkaforCommercial Lending | pasteMicrosoft Copilot (consumer) | Member PII, SSN / Tax ID, Account Numbers | Redactv5 | —true positive | Chain |
| Aug 11, 2026 at 8:22 AMWeek 10 | A. BergströmCredit Administration | promptMicrosoft Copilot (consumer) | Credit Memos, Member PII | Warnv5 | redirected | Chain |
| Aug 10, 2026 at 2:58 PMWeek 10 | N. OyelaranCredit Administration | uploadMicrosoft Copilot (consumer) | Loan Files, Member PII | Warnv5 | transformed | Chain |
| Aug 10, 2026 at 11:44 AMWeek 10 | N. OyelaranCredit Administration | promptMicrosoft Copilot (consumer) | Loan Files, Member PII | Warnv5 | redirected | Chain |