Signed in asM. HalloranCompliance officer · Compliance/BSAThe console in full: every actor, every event, the adjudication queue, and the actions on the pending policy proposal.
Provenance · one movement, end to end
G. Iyer — prompt to Microsoft Copilot (consumer)
Aug 6, 2026 at 1:28 PM · Week 9 · event 83306bb0-c91e-44dd-84c4-b68491900ae3Actor
G. Iyer — Systems administrator, IT · IT role groupThe role group is what the policy engine resolves against; the department is what the console cuts by. The event carries both, so no projection has to join.
Content
Why does the nightly job fail with this credential set? AKIAQIYEYAQAJAYMQYYQ has read access to the statements bucket.
proved by a checksum or a format rule · matched by a pattern, which is a shape, or by the taxonomy or the institution’s dictionary, which are vocabulary markers — neither is a proof
| Data class | Offsets | Proof | Detector |
|---|---|---|---|
| API Keys / Creds | 56–76 | pattern match — a shape, not a proof | pat-credential |
Decision
Block under policy v5, in force from Aug 3, 2026.The cells that decided it, for the IT role group: API Keys / Creds — Block.
Transform
No transform ran. The content was decided and left as it was.
Destination
Microsoft Copilot (consumer) — public, assessedThe consumer surface, not the tenant. Easy to confuse with M365 Copilot, and often is.
Outcome
No coaching outcome: the mode did not put a card in front of anybody.Not adjudicated. The absence means something: precision is computed over the adjudicated sample only, and an unreviewed event is not evidence of anything.
The record
- captured Aug 6, 2026 at 1:28 PMG. Iyer (Systems administrator, IT) — prompt to Microsoft Copilot (consumer).
- classified Aug 6, 2026 at 1:28 PM1 span in api_keys_creds; proof recorded on each span.
- decided Aug 6, 2026 at 1:28 PMblock under policy v5, from the api_keys_creds cell for the it role group.
- blocked Aug 6, 2026 at 1:28 PMSubmission stopped before it left the browser. Nothing reached Microsoft Copilot (consumer).
The same chain in JSON: /api/v1/events?id=83306bb0…
Events · the log itself
1,144 events matching trailing 30 days
Jul 16 – Aug 14, 2026. Every row drills to the full provenance chain, and every state on this page — filters, page and drill alike — is a URL you can paste to a colleague. The same query as JSON: /api/v1/events?scope=windowWho sent them — 24 people across 1,144 events
N. OyelaranCredit Administration138H. DelacroixCredit Administration137A. BergströmCredit Administration119K. OseiCommercial Lending78D. WhitfieldCommercial Lending76R. OkaforCommercial Lending75I. QuinteroRetail & Branch Ops72T. BeaulieuCommercial Lending70
The 8 people carrying the most of this filter, of 24. Narrow the Person control above to read one of them alone.
| When | Who | Channel · destination | Classes | Decision | Outcome | |
|---|---|---|---|---|---|---|
| Aug 6, 2026 at 4:20 PMWeek 9 | H. DelacroixCredit Administration | promptClaude.ai (personal) | Member PII | Warnv5 | abandoned | Chain |
| Aug 6, 2026 at 4:05 PMWeek 9 | H. DelacroixCredit Administration | promptChatGPT (personal) | Loan Files, Member PII | Warnv5 | redirected | Chain |
| Aug 6, 2026 at 3:36 PMWeek 9 | T. BeaulieuCommercial Lending | uploadGemini Advanced | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 6, 2026 at 3:31 PMWeek 9 | B. MwangiFinance | pasteChatGPT (personal) | Account Numbers, Member PII | Monitorv5 | — | Chain |
| Aug 6, 2026 at 3:11 PMWeek 9 | A. BergströmCredit Administration | pasteChatGPT (personal) | Member PII | Warnv5 | redirectedtrue positive | Chain |
| Aug 6, 2026 at 3:11 PMWeek 9 | J. KowalczykRetail & Branch Ops | pasteChatGPT (personal) | Account Numbers, Member PII | Monitorv5 | — | Chain |
| Aug 6, 2026 at 2:54 PMWeek 9 | K. OseiCommercial Lending | uploadClaude.ai (personal) | Credit Memos, Member PII | Redactv5 | — | Chain |
| Aug 6, 2026 at 2:48 PMWeek 9 | M. RamaswamyCommercial Lending | promptPerplexity | Member PII, SSN / Tax ID, Account Numbers | Redactv5 | —true positive | Chain |
| Aug 6, 2026 at 2:26 PMWeek 9 | D. WhitfieldCommercial Lending | promptClaude.ai (personal) | Member PII | Redactv5 | —true positive | Chain |
| Aug 6, 2026 at 2:24 PMWeek 9 | P. NakamuraRetail & Branch Ops | promptMicrosoft Copilot (consumer) | Member PII | Monitorv5 | — | Chain |
| Aug 6, 2026 at 2:15 PMWeek 9 | J. KowalczykRetail & Branch Ops | promptChatGPT (personal) | Account Numbers, Member PII | Monitorv5 | — | Chain |
| Aug 6, 2026 at 2:13 PMWeek 9 | D. WhitfieldCommercial Lending | promptMicrosoft Copilot (consumer) | Loan Files | Monitorv5 | — | Chain |
| Aug 6, 2026 at 2:11 PMWeek 9 | N. OyelaranCredit Administration | pasteChatGPT (personal) | Member PII, SSN / Tax ID, Account Numbers | Warnv5 | redirected | Chain |
| Aug 6, 2026 at 1:55 PMWeek 9 | H. DelacroixCredit Administration | pastePerplexity | Member PII | Warnv5 | transformed | Chain |
| Aug 6, 2026 at 1:54 PMWeek 9 | P. NakamuraRetail & Branch Ops | pasteChatGPT (personal) | Account Numbers, Member PII | Monitorv5 | — | Chain |
| Aug 6, 2026 at 1:47 PMWeek 9 | H. DelacroixCredit Administration | promptChatGPT (personal) | Credit Memos, Member PII | Warnv5 | redirected | Chain |
| Aug 6, 2026 at 1:28 PMWeek 9 | G. IyerIT | promptMicrosoft Copilot (consumer) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 6, 2026 at 1:27 PMWeek 9 | A. BergströmCredit Administration | pasteGemini Advanced | Member PII, Account Numbers | Warnv5 | redirected | Chain |
| Aug 6, 2026 at 1:22 PMWeek 9 | L. TranRetail & Branch Ops | pasteChatGPT (personal) | Member PII | Monitorv5 | — | Chain |
| Aug 6, 2026 at 1:20 PMWeek 9 | N. OyelaranCredit Administration | uploadChatGPT (personal) | Loan Files, Member PII | Warnv5 | redirected | Chain |
| Aug 6, 2026 at 1:13 PMWeek 9 | I. QuinteroRetail & Branch Ops | pasteChatGPT (personal) | Member PII | Monitorv5 | — | Chain |
| Aug 6, 2026 at 1:11 PMWeek 9 | R. OkaforCommercial Lending | uploadClaude.ai (personal) | Loan Files, Member PII | Redactv5 | —true positive | Chain |
| Aug 6, 2026 at 12:32 PMWeek 9 | F. DuarteIT | pasteMicrosoft Copilot (consumer) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 6, 2026 at 12:29 PMWeek 9 | S. AdeyemiRetail & Branch Ops | pasteGemini Advanced | SSN / Tax ID | Monitorv5 | — | Chain |
| Aug 6, 2026 at 12:23 PMWeek 9 | H. DelacroixCredit Administration | promptChatGPT (personal) | Loan Files, Member PII | Warnv5 | redirected | Chain |
Showing 376–400 of 1,144 · page 16 of 46⇤ First← PreviousNext →Last ⇥