Signed in asM. HalloranCompliance officer · Compliance/BSAThe console in full: every actor, every event, the adjudication queue, and the actions on the pending policy proposal.
Provenance · one movement, end to end
R. Castellano — paste to ChatGPT (personal)
Jul 22, 2026 at 11:05 AM · Week 7 · event 57435185-3a40-423d-a1bd-e11de635b6e3Actor
R. Castellano — Compliance testing specialist, Compliance/BSA · Compliance role groupThe role group is what the policy engine resolves against; the department is what the console cuts by. The event carries both, so no projection has to join.
Content
Detection coverage test CT-2291. Submitting a decommissioned sandbox credential to confirm the rule fires: AKIA7Q2XM4RVTB9ZLKD3. No live credential is involved.
proved by a checksum or a format rule · matched by a pattern, which is a shape, or by the taxonomy or the institution’s dictionary, which are vocabulary markers — neither is a proof
| Data class | Offsets | Proof | Detector |
|---|---|---|---|
| API Keys / Creds | 107–127 | pattern match — a shape, not a proof | pat-credential |
Decision
Warn under policy v4, in force from Jul 20, 2026.The cells that decided it, for the Compliance role group: API Keys / Creds — Block.Softened by the compliance-testing exception — an authorized exception is a policy outcome, not a policy bypass, and the group that granted it is recorded on the decision.
Transform
No transform ran. The content was decided and left as it was.
Destination
ChatGPT (personal) — public, assessedPersonal accounts on the consumer tier. Prompts are outside the institution’s contract.
Outcome
The user overridden after the card.Override justification: “Authorized detection-coverage test CT-2291. Decommissioned sandbox credential, no customer data and no live secret. Reviewed with the IT director.” — under the compliance-testing exception.Not adjudicated. The absence means something: precision is computed over the adjudicated sample only, and an unreviewed event is not evidence of anything.
The record
- captured Jul 22, 2026 at 11:05 AMR. Castellano (Compliance testing specialist, Compliance/BSA) — paste to ChatGPT (personal).
- classified Jul 22, 2026 at 11:05 AM1 span in api_keys_creds; proof recorded on each span.
- decided Jul 22, 2026 at 11:05 AMwarn under policy v4 — softened from the api_keys_creds cell by the compliance-testing exception, and logged.
- overridden Jul 22, 2026 at 11:05 AMOverridden with justification: “Authorized detection-coverage test CT-2291. Decommissioned sandbox credential, no customer data and no live secret. Reviewed with the IT director.”
- submitted Jul 22, 2026 at 11:05 AMSubmitted to ChatGPT (personal) as typed.
The same chain in JSON: /api/v1/events?id=57435185…
Events · the log itself
1,144 events matching trailing 30 days
Jul 16 – Aug 14, 2026. Every row drills to the full provenance chain, and every state on this page — filters, page and drill alike — is a URL you can paste to a colleague. The same query as JSON: /api/v1/events?scope=windowWho sent them — 24 people across 1,144 events
N. OyelaranCredit Administration138H. DelacroixCredit Administration137A. BergströmCredit Administration119K. OseiCommercial Lending78D. WhitfieldCommercial Lending76R. OkaforCommercial Lending75I. QuinteroRetail & Branch Ops72T. BeaulieuCommercial Lending70
The 8 people carrying the most of this filter, of 24. Narrow the Person control above to read one of them alone.
| When | Who | Channel · destination | Classes | Decision | Outcome | |
|---|---|---|---|---|---|---|
| Jul 22, 2026 at 11:39 AMWeek 7 | P. NakamuraRetail & Branch Ops | pasteMicrosoft Copilot (consumer) | Account Numbers | Monitorv4 | — | Chain |
| Jul 22, 2026 at 11:36 AMWeek 7 | R. OkaforCommercial Lending | promptChatGPT (personal) | Member PII, SSN / Tax ID, Account Numbers | Warnv4 | transformed | Chain |
| Jul 22, 2026 at 11:11 AMWeek 7 | D. WhitfieldCommercial Lending | uploadMicrosoft Copilot (consumer) | Loan Files, Member PII | Warnv4 | redirected | Chain |
| Jul 22, 2026 at 11:05 AMWeek 7 | R. CastellanoCompliance/BSA | pasteChatGPT (personal) | API Keys / Creds | Warnv4 | overridden | Chain |
| Jul 22, 2026 at 10:56 AMWeek 7 | R. OkaforCommercial Lending | promptGemini Advanced | Loan Files, Member PII | Warnv4 | transformed | Chain |
| Jul 22, 2026 at 10:54 AMWeek 7 | K. OseiCommercial Lending | promptGemini Advanced | Credit Memos, Member PII | Warnv4 | transformed | Chain |
| Jul 22, 2026 at 10:50 AMWeek 7 | N. OyelaranCredit Administration | pasteChatGPT (personal) | SSN / Tax ID | Warnv4 | transformed | Chain |
| Jul 22, 2026 at 10:21 AMWeek 7 | I. QuinteroRetail & Branch Ops | promptClaude.ai (personal) | Account Numbers | Monitorv4 | — | Chain |
| Jul 22, 2026 at 9:25 AMWeek 7 | K. OseiCommercial Lending | pasteM365 Copilot | Member PII, Account Numbers | Warnv4 | transformedtrue positive | Chain |
| Jul 22, 2026 at 9:25 AMWeek 7 | I. QuinteroRetail & Branch Ops | pasteChatGPT (personal) | Member PII, Account Numbers | Monitorv4 | — | Chain |
| Jul 22, 2026 at 9:22 AMWeek 7 | E. LindqvistFinance | pasteChatGPT (personal) | Account Numbers | Monitorv4 | — | Chain |
| Jul 22, 2026 at 9:09 AMWeek 7 | J. KowalczykRetail & Branch Ops | pasteGemini Advanced | Member PII | Monitorv4 | —true positive | Chain |
| Jul 22, 2026 at 9:08 AMWeek 7 | F. DuarteIT | promptChatGPT (personal) | API Keys / Creds | Blockv4 | — | Chain |
| Jul 22, 2026 at 9:03 AMWeek 7 | N. OyelaranCredit Administration | promptMicrosoft Copilot (consumer) | Loan Files, Member PII | Warnv4 | transformed | Chain |
| Jul 22, 2026 at 8:57 AMWeek 7 | M. RamaswamyCommercial Lending | pasteMicrosoft Copilot (consumer) | Loan Files, Member PII | Warnv4 | abandoned | Chain |
| Jul 22, 2026 at 8:46 AMWeek 7 | A. BergströmCredit Administration | promptClaude.ai (personal) | Credit Memos, Member PII | Warnv4 | transformed | Chain |
| Jul 22, 2026 at 8:39 AMWeek 7 | L. TranRetail & Branch Ops | promptChatGPT (personal) | Account Numbers | Monitorv4 | — | Chain |
| Jul 22, 2026 at 8:33 AMWeek 7 | I. QuinteroRetail & Branch Ops | promptChatGPT (personal) | Member PII | Monitorv4 | — | Chain |
| Jul 21, 2026 at 5:40 PMWeek 7 | T. BeaulieuCommercial Lending | pasteChatGPT (personal) | Credit Memos, Member PII | Warnv4 | redirected | Chain |
| Jul 21, 2026 at 5:35 PMWeek 7 | J. KowalczykRetail & Branch Ops | pasteChatGPT (personal) | Member PII, Account Numbers | Monitorv4 | — | Chain |
| Jul 21, 2026 at 5:30 PMWeek 7 | P. NakamuraRetail & Branch Ops | pasteGemini Advanced | Account Numbers, Member PII | Monitorv4 | — | Chain |
| Jul 21, 2026 at 4:59 PMWeek 7 | A. BergströmCredit Administration | promptGemini Advanced | Member PII | Warnv4 | transformed | Chain |
| Jul 21, 2026 at 4:32 PMWeek 7 | R. OkaforCommercial Lending | promptMicrosoft Copilot (consumer) | Loan Files, Member PII | Warnv4 | transformed | Chain |
| Jul 21, 2026 at 4:26 PMWeek 7 | P. NakamuraRetail & Branch Ops | promptChatGPT (personal) | Account Numbers, Member PII | Monitorv4 | — | Chain |
| Jul 21, 2026 at 4:13 PMWeek 7 | A. BergströmCredit Administration | promptChatGPT (personal) | Member PII | Warnv4 | abandoned | Chain |
Showing 951–975 of 1,144 · page 39 of 46⇤ First← PreviousNext →Last ⇥