Signed in asM. HalloranCompliance officer · Compliance/BSAThe console in full: every actor, every event, the adjudication queue, and the actions on the pending policy proposal.
Provenance · one movement, end to end
G. Iyer — paste to Microsoft Copilot (consumer)
Aug 4, 2026 at 2:28 PM · Week 9 · event 664e647f-98af-493d-bcea-f478f550aad0Actor
G. Iyer — Systems administrator, IT · IT role groupThe role group is what the policy engine resolves against; the department is what the console cuts by. The event carries both, so no projection has to join.
Content
This call keeps returning 401. The header is Authorization: Bearer sk-live-eyiqmmqyem2iuquyuuiqquye2qua — what am I missing?
proved by a checksum or a format rule · matched by a pattern, which is a shape, or by the taxonomy or the institution’s dictionary, which are vocabulary markers — neither is a proof
| Data class | Offsets | Proof | Detector |
|---|---|---|---|
| API Keys / Creds | 67–103 | pattern match — a shape, not a proof | pat-credential |
Decision
Block under policy v5, in force from Aug 3, 2026.The cells that decided it, for the IT role group: API Keys / Creds — Block.
Transform
No transform ran. The content was decided and left as it was.
Destination
Microsoft Copilot (consumer) — public, assessedThe consumer surface, not the tenant. Easy to confuse with M365 Copilot, and often is.
Outcome
No coaching outcome: the mode did not put a card in front of anybody.Not adjudicated. The absence means something: precision is computed over the adjudicated sample only, and an unreviewed event is not evidence of anything.
The record
- captured Aug 4, 2026 at 2:28 PMG. Iyer (Systems administrator, IT) — paste to Microsoft Copilot (consumer).
- classified Aug 4, 2026 at 2:28 PM1 span in api_keys_creds; proof recorded on each span.
- decided Aug 4, 2026 at 2:28 PMblock under policy v5, from the api_keys_creds cell for the it role group.
- blocked Aug 4, 2026 at 2:28 PMSubmission stopped before it left the browser. Nothing reached Microsoft Copilot (consumer).
The same chain in JSON: /api/v1/events?id=664e647f…
Events · the log itself
585 events matching policy v5
Jun 8 – Aug 14, 2026. Every row drills to the full provenance chain, and every state on this page — filters, page and drill alike — is a URL you can paste to a colleague. The same query as JSON: /api/v1/events?version=v5Who sent them — 22 people across 585 events
H. DelacroixCredit Administration69N. OyelaranCredit Administration67A. BergströmCredit Administration65D. WhitfieldCommercial Lending49R. OkaforCommercial Lending41M. RamaswamyCommercial Lending38T. BeaulieuCommercial Lending35K. OseiCommercial Lending34
The 8 people carrying the most of this filter, of 22. Narrow the Person control above to read one of them alone.
| When | Who | Channel · destination | Classes | Decision | Outcome | |
|---|---|---|---|---|---|---|
| Aug 5, 2026 at 8:16 AMWeek 9 | I. QuinteroRetail & Branch Ops | promptChatGPT (personal) | Account Numbers, Member PII | Monitorv5 | — | Chain |
| Aug 4, 2026 at 5:55 PMWeek 9 | N. OyelaranCredit Administration | pasteChatGPT (personal) | Member PII, Account Numbers | Warnv5 | redirected | Chain |
| Aug 4, 2026 at 5:54 PMWeek 9 | R. OkaforCommercial Lending | uploadClaude.ai (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 4, 2026 at 5:43 PMWeek 9 | T. BeaulieuCommercial Lending | pasteM365 Copilot | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 4, 2026 at 5:43 PMWeek 9 | A. BergströmCredit Administration | uploadChatGPT (personal) | Loan Files | Monitorv5 | — | Chain |
| Aug 4, 2026 at 5:25 PMWeek 9 | E. LindqvistFinance | pasteChatGPT (personal) | Account Numbers | Monitorv5 | — | Chain |
| Aug 4, 2026 at 4:58 PMWeek 9 | A. BergströmCredit Administration | promptClaude.ai (personal) | Loan Files, Member PII | Warnv5 | transformed | Chain |
| Aug 4, 2026 at 4:55 PMWeek 9 | A. BergströmCredit Administration | uploadChatGPT (personal) | Credit Memos, Member PII | Warnv5 | redirected | Chain |
| Aug 4, 2026 at 4:53 PMWeek 9 | H. DelacroixCredit Administration | promptClaude.ai (personal) | Loan Files, Member PII | Warnv5 | redirected | Chain |
| Aug 4, 2026 at 4:47 PMWeek 9 | T. BeaulieuCommercial Lending | promptMicrosoft Copilot (consumer) | Account Numbers | Tokenizev5 | — | Chain |
| Aug 4, 2026 at 4:45 PMWeek 9 | H. DelacroixCredit Administration | promptGemini Advanced | Member PII, SSN / Tax ID, Account Numbers | Warnv5 | overridden | Chain |
| Aug 4, 2026 at 4:16 PMWeek 9 | D. WhitfieldCommercial Lending | uploadChatGPT (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 4, 2026 at 4:15 PMWeek 9 | A. BergströmCredit Administration | promptM365 Copilot | Member PII | Warnv5 | redirected | Chain |
| Aug 4, 2026 at 4:10 PMWeek 9 | N. OyelaranCredit Administration | pasteClaude.ai (personal) | Credit Memos | Monitorv5 | —true positive | Chain |
| Aug 4, 2026 at 4:07 PMWeek 9 | L. TranRetail & Branch Ops | promptMicrosoft Copilot (consumer) | Member PII | Monitorv5 | — | Chain |
| Aug 4, 2026 at 3:52 PMWeek 9 | I. QuinteroRetail & Branch Ops | pasteMicrosoft Copilot (consumer) | Account Numbers | Monitorv5 | — | Chain |
| Aug 4, 2026 at 3:45 PMWeek 9 | A. BergströmCredit Administration | pasteChatGPT (personal) | Member PII | Warnv5 | redirected | Chain |
| Aug 4, 2026 at 3:23 PMWeek 9 | I. QuinteroRetail & Branch Ops | pasteClaude.ai (personal) | Account Numbers, Member PII | Monitorv5 | — | Chain |
| Aug 4, 2026 at 3:00 PMWeek 9 | H. DelacroixCredit Administration | pasteChatGPT (personal) | Credit Memos, Member PII | Warnv5 | redirected | Chain |
| Aug 4, 2026 at 2:51 PMWeek 9 | R. OkaforCommercial Lending | uploadClaude.ai (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 4, 2026 at 2:28 PMWeek 9 | G. IyerIT | pasteMicrosoft Copilot (consumer) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 4, 2026 at 2:25 PMWeek 9 | S. AdeyemiRetail & Branch Ops | promptChatGPT (personal) | Member PII | Monitorv5 | — | Chain |
| Aug 4, 2026 at 2:15 PMWeek 9 | A. BergströmCredit Administration | promptM365 Copilot | Member PII | Warnv5 | redirected | Chain |
| Aug 4, 2026 at 2:09 PMWeek 9 | M. RamaswamyCommercial Lending | uploadChatGPT (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 4, 2026 at 2:05 PMWeek 9 | J. KowalczykRetail & Branch Ops | promptChatGPT (personal) | Account Numbers | Monitorv5 | — | Chain |
Showing 476–500 of 585 · page 20 of 24⇤ First← PreviousNext →Last ⇥