Signed in asM. HalloranCompliance officer · Compliance/BSAThe console in full: every actor, every event, the adjudication queue, and the actions on the pending policy proposal.
Provenance · one movement, end to end
G. Iyer — paste to Gemini Advanced
Jul 27, 2026 at 10:36 AM · Week 8 · event 5b7dbd67-2526-439e-ba12-460e2d55f922Actor
G. Iyer — Systems administrator, IT · IT role groupThe role group is what the policy engine resolves against; the department is what the console cuts by. The event carries both, so no projection has to join.
Content
This call keeps returning 401. The header is Authorization: Bearer sk-live-aiaaei2uyum6i2iy2q22ai2uqi2q — what am I missing?
proved by a checksum or a format rule · matched by a pattern, which is a shape, or by the taxonomy or the institution’s dictionary, which are vocabulary markers — neither is a proof
| Data class | Offsets | Proof | Detector |
|---|---|---|---|
| API Keys / Creds | 67–103 | pattern match — a shape, not a proof | pat-credential |
Decision
Block under policy v4, in force from Jul 20, 2026.The cells that decided it, for the IT role group: API Keys / Creds — Block.
Transform
No transform ran. The content was decided and left as it was.
Destination
Gemini Advanced — public, assessedReached most often through personal Google accounts on bank hardware.
Outcome
No coaching outcome: the mode did not put a card in front of anybody.Triage marked it true positive — M. Halloran, Jul 27, 2026 at 5:30 PM. Open in Triage
The record
- captured Jul 27, 2026 at 10:36 AMG. Iyer (Systems administrator, IT) — paste to Gemini Advanced.
- classified Jul 27, 2026 at 10:36 AM1 span in api_keys_creds; proof recorded on each span.
- decided Jul 27, 2026 at 10:36 AMblock under policy v4, from the api_keys_creds cell for the it role group.
- blocked Jul 27, 2026 at 10:36 AMSubmission stopped before it left the browser. Nothing reached Gemini Advanced.
- adjudicated Jul 27, 2026 at 5:30 PMMarked a true positive by M. Halloran in triage.
The same chain in JSON: /api/v1/events?id=5b7dbd67…
Events · the log itself
1,144 events matching trailing 30 days
Jul 16 – Aug 14, 2026. Every row drills to the full provenance chain, and every state on this page — filters, page and drill alike — is a URL you can paste to a colleague. The same query as JSON: /api/v1/events?scope=windowWho sent them — 24 people across 1,144 events
N. OyelaranCredit Administration138H. DelacroixCredit Administration137A. BergströmCredit Administration119K. OseiCommercial Lending78D. WhitfieldCommercial Lending76R. OkaforCommercial Lending75I. QuinteroRetail & Branch Ops72T. BeaulieuCommercial Lending70
The 8 people carrying the most of this filter, of 24. Narrow the Person control above to read one of them alone.
| When | Who | Channel · destination | Classes | Decision | Outcome | |
|---|---|---|---|---|---|---|
| Jul 27, 2026 at 2:00 PMWeek 8 | K. OseiCommercial Lending | promptGemini Advanced | Member PII, Account Numbers | Warnv4 | transformed | Chain |
| Jul 27, 2026 at 1:56 PMWeek 8 | M. RamaswamyCommercial Lending | pasteGemini Advanced | Member PII, SSN / Tax ID, Account Numbers | Warnv4 | transformed | Chain |
| Jul 27, 2026 at 1:56 PMWeek 8 | N. OyelaranCredit Administration | uploadChatGPT (personal) | Loan Files, Member PII | Warnv4 | abandoned | Chain |
| Jul 27, 2026 at 1:49 PMWeek 8 | M. RamaswamyCommercial Lending | uploadClaude.ai (personal) | Loan Files | Monitorv4 | — | Chain |
| Jul 27, 2026 at 1:38 PMWeek 8 | Y. AbadiCompliance/BSA | pastePerplexity | Member PII | Monitorv4 | — | Chain |
| Jul 27, 2026 at 12:59 PMWeek 8 | P. NakamuraRetail & Branch Ops | promptChatGPT (personal) | Member PII | Monitorv4 | — | Chain |
| Jul 27, 2026 at 12:51 PMWeek 8 | S. AdeyemiRetail & Branch Ops | promptChatGPT (personal) | Account Numbers | Monitorv4 | — | Chain |
| Jul 27, 2026 at 12:48 PMWeek 8 | H. DelacroixCredit Administration | pasteMicrosoft Copilot (consumer) | Credit Memos, Member PII | Warnv4 | transformed | Chain |
| Jul 27, 2026 at 12:34 PMWeek 8 | K. OseiCommercial Lending | promptM365 Copilot | Account Numbers | Monitorv4 | —true positive | Chain |
| Jul 27, 2026 at 12:26 PMWeek 8 | P. NakamuraRetail & Branch Ops | promptGemini Advanced | Member PII | Monitorv4 | — | Chain |
| Jul 27, 2026 at 12:10 PMWeek 8 | H. DelacroixCredit Administration | pasteChatGPT (personal) | Credit Memos, Member PII | Warnv4 | transformed | Chain |
| Jul 27, 2026 at 11:35 AMWeek 8 | P. NakamuraRetail & Branch Ops | pasteClaude.ai (personal) | Member PII | Monitorv4 | — | Chain |
| Jul 27, 2026 at 11:26 AMWeek 8 | P. NakamuraRetail & Branch Ops | pasteGemini Advanced | Member PII | Monitorv4 | — | Chain |
| Jul 27, 2026 at 11:21 AMWeek 8 | P. NakamuraRetail & Branch Ops | promptChatGPT (personal) | SSN / Tax ID | Monitorv4 | — | Chain |
| Jul 27, 2026 at 11:07 AMWeek 8 | T. BeaulieuCommercial Lending | promptGemini Advanced | Loan Files, Member PII | Warnv4 | redirected | Chain |
| Jul 27, 2026 at 11:01 AMWeek 8 | M. RamaswamyCommercial Lending | pasteChatGPT (personal) | Loan Files, Member PII | Warnv4 | overridden | Chain |
| Jul 27, 2026 at 11:01 AMWeek 8 | J. KowalczykRetail & Branch Ops | pasteChatGPT (personal) | Account Numbers, Member PII | Monitorv4 | — | Chain |
| Jul 27, 2026 at 10:55 AMWeek 8 | N. OyelaranCredit Administration | promptClaude.ai (personal) | Loan Files, Member PII | Warnv4 | transformed | Chain |
| Jul 27, 2026 at 10:44 AMWeek 8 | I. QuinteroRetail & Branch Ops | promptClaude.ai (personal) | Account Numbers | Monitorv4 | — | Chain |
| Jul 27, 2026 at 10:36 AMWeek 8 | G. IyerIT | pasteGemini Advanced | API Keys / Creds | Blockv4 | —true positive | Chain |
| Jul 27, 2026 at 10:29 AMWeek 8 | L. TranRetail & Branch Ops | promptM365 Copilot | Member PII | Monitorv4 | — | Chain |
| Jul 27, 2026 at 10:21 AMWeek 8 | P. NakamuraRetail & Branch Ops | promptClaude.ai (personal) | Account Numbers, Member PII | Monitorv4 | — | Chain |
| Jul 27, 2026 at 10:16 AMWeek 8 | N. OyelaranCredit Administration | promptChatGPT (personal) | Member PII, Account Numbers | Warnv4 | overridden | Chain |
| Jul 27, 2026 at 10:14 AMWeek 8 | A. BergströmCredit Administration | promptGemini Advanced | Credit Memos, Member PII | Warnv4 | redirected | Chain |
| Jul 27, 2026 at 9:55 AMWeek 8 | T. BeaulieuCommercial Lending | promptClaude.ai (personal) | Loan Files, Member PII | Warnv4 | redirected | Chain |
Showing 801–825 of 1,144 · page 33 of 46⇤ First← PreviousNext →Last ⇥