Signed in asM. HalloranCompliance officer · Compliance/BSAThe console in full: every actor, every event, the adjudication queue, and the actions on the pending policy proposal.
Provenance · one movement, end to end
F. Duarte — paste to Claude.ai (personal)
Aug 13, 2026 at 8:20 AM · Week 10 · event 580b7b45-beb6-4e6e-bcbe-639eb0e7971aActor
F. Duarte — IT director, IT · IT role groupThe role group is what the policy engine resolves against; the department is what the console cuts by. The event carries both, so no projection has to join.
Content
Rewrite this connection string with retries: token=ghp_2mmey6uiy2eyqyaam6qm2eami2qm, timeout 30s, three attempts.
proved by a checksum or a format rule · matched by a pattern, which is a shape, or by the taxonomy or the institution’s dictionary, which are vocabulary markers — neither is a proof
| Data class | Offsets | Proof | Detector |
|---|---|---|---|
| API Keys / Creds | 51–83 | pattern match — a shape, not a proof | pat-credential |
Decision
Block under policy v5, in force from Aug 3, 2026.The cells that decided it, for the IT role group: API Keys / Creds — Block.
Transform
No transform ran. The content was decided and left as it was.
Destination
Claude.ai (personal) — public, assessedPersonal accounts. Heavily used in IT and Credit Administration.
Outcome
No coaching outcome: the mode did not put a card in front of anybody.Not adjudicated. The absence means something: precision is computed over the adjudicated sample only, and an unreviewed event is not evidence of anything.
The record
- captured Aug 13, 2026 at 8:20 AMF. Duarte (IT director, IT) — paste to Claude.ai (personal).
- classified Aug 13, 2026 at 8:20 AM1 span in api_keys_creds; proof recorded on each span.
- decided Aug 13, 2026 at 8:20 AMblock under policy v5, from the api_keys_creds cell for the it role group.
- blocked Aug 13, 2026 at 8:20 AMSubmission stopped before it left the browser. Nothing reached Claude.ai (personal).
The same chain in JSON: /api/v1/events?id=580b7b45…
Events · the log itself
34 events matching blocked in the page · trailing 30 days
Jul 16 – Aug 14, 2026. Every row drills to the full provenance chain, and every state on this page — filters, page and drill alike — is a URL you can paste to a colleague. The same query as JSON: /api/v1/events?scope=window&split=blockedWho sent them — 7 people across 34 events
| When | Who | Channel · destination | Classes | Decision | Outcome | |
|---|---|---|---|---|---|---|
| Aug 14, 2026 at 3:29 PMWeek 10 | V. SokolovIT | promptChatGPT (personal) | API Keys / Creds | Blockv5 | —true positive | Chain |
| Aug 14, 2026 at 1:42 PMWeek 10 | F. DuarteIT | promptClaude.ai (personal) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 14, 2026 at 12:06 PMWeek 10 | B. MwangiFinance | pasteChatGPT (personal) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 13, 2026 at 5:36 PMWeek 10 | L. TranRetail & Branch Ops | promptGemini Advanced | API Keys / Creds | Blockv5 | — | Chain |
| Aug 13, 2026 at 2:05 PMWeek 10 | V. SokolovIT | pasteChatGPT (personal) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 13, 2026 at 8:20 AMWeek 10 | F. DuarteIT | pasteClaude.ai (personal) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 12, 2026 at 5:07 PMWeek 10 | V. SokolovIT | promptChatGPT (personal) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 12, 2026 at 3:18 PMWeek 10 | F. DuarteIT | promptChatGPT (personal) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 12, 2026 at 2:30 PMWeek 10 | G. IyerIT | pasteMicrosoft Copilot (consumer) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 11, 2026 at 3:58 PMWeek 10 | G. IyerIT | promptChatGPT (personal) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 11, 2026 at 3:05 PMWeek 10 | F. DuarteIT | uploadClaude.ai (personal) | Confidential Supervisory Information | Blockv5 | — | Chain |
| Aug 11, 2026 at 2:10 PMWeek 10 | V. SokolovIT | pasteMicrosoft Copilot (consumer) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 10, 2026 at 5:10 PMWeek 10 | F. DuarteIT | promptGemini Advanced | API Keys / Creds | Blockv5 | — | Chain |
| Aug 10, 2026 at 4:06 PMWeek 10 | F. DuarteIT | pasteChatGPT (personal) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 7, 2026 at 9:57 AMWeek 9 | V. SokolovIT | promptClaude.ai (personal) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 7, 2026 at 8:37 AMWeek 9 | F. DuarteIT | pastePerplexity | API Keys / Creds | Blockv5 | — | Chain |
| Aug 6, 2026 at 1:28 PMWeek 9 | G. IyerIT | promptMicrosoft Copilot (consumer) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 6, 2026 at 12:32 PMWeek 9 | F. DuarteIT | pasteMicrosoft Copilot (consumer) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 6, 2026 at 9:15 AMWeek 9 | I. QuinteroRetail & Branch Ops | pasteGemini Advanced | BSA / AML Material | Blockv5 | — | Chain |
| Aug 5, 2026 at 1:52 PMWeek 9 | V. SokolovIT | promptChatGPT (personal) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 5, 2026 at 8:42 AMWeek 9 | G. IyerIT | pasteChatGPT (personal) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 4, 2026 at 2:28 PMWeek 9 | G. IyerIT | pasteMicrosoft Copilot (consumer) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 4, 2026 at 9:24 AMWeek 9 | G. IyerIT | promptClaude.ai (personal) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 3, 2026 at 4:03 PMWeek 9 | V. SokolovIT | pasteChatGPT (personal) | API Keys / Creds | Blockv5 | —true positive | Chain |
| Jul 31, 2026 at 4:01 PMWeek 8 | F. DuarteIT | pasteChatGPT (personal) | API Keys / Creds | Blockv4 | — | Chain |