Signed in asM. HalloranCompliance officer · Compliance/BSAThe console in full: every actor, every event, the adjudication queue, and the actions on the pending policy proposal.
Provenance · one movement, end to end
G. Iyer — paste to Microsoft Copilot (consumer)
Aug 12, 2026 at 2:30 PM · Week 10 · event 9c40b477-6bab-4b71-a7fe-49f025eb8b43Actor
G. Iyer — Systems administrator, IT · IT role groupThe role group is what the policy engine resolves against; the department is what the console cuts by. The event carries both, so no projection has to join.
Content
This call keeps returning 401. The header is Authorization: Bearer sk-live-aimume2auqq22yqq6ym6yy6mquiy — what am I missing?
proved by a checksum or a format rule · matched by a pattern, which is a shape, or by the taxonomy or the institution’s dictionary, which are vocabulary markers — neither is a proof
| Data class | Offsets | Proof | Detector |
|---|---|---|---|
| API Keys / Creds | 67–103 | pattern match — a shape, not a proof | pat-credential |
Decision
Block under policy v5, in force from Aug 3, 2026.The cells that decided it, for the IT role group: API Keys / Creds — Block.
Transform
No transform ran. The content was decided and left as it was.
Destination
Microsoft Copilot (consumer) — public, assessedThe consumer surface, not the tenant. Easy to confuse with M365 Copilot, and often is.
Outcome
No coaching outcome: the mode did not put a card in front of anybody.Not adjudicated. The absence means something: precision is computed over the adjudicated sample only, and an unreviewed event is not evidence of anything.
The record
- captured Aug 12, 2026 at 2:30 PMG. Iyer (Systems administrator, IT) — paste to Microsoft Copilot (consumer).
- classified Aug 12, 2026 at 2:30 PM1 span in api_keys_creds; proof recorded on each span.
- decided Aug 12, 2026 at 2:30 PMblock under policy v5, from the api_keys_creds cell for the it role group.
- blocked Aug 12, 2026 at 2:30 PMSubmission stopped before it left the browser. Nothing reached Microsoft Copilot (consumer).
The same chain in JSON: /api/v1/events?id=9c40b477…
Events · the log itself
1,144 events matching trailing 30 days
Jul 16 – Aug 14, 2026. Every row drills to the full provenance chain, and every state on this page — filters, page and drill alike — is a URL you can paste to a colleague. The same query as JSON: /api/v1/events?scope=windowWho sent them — 24 people across 1,144 events
N. OyelaranCredit Administration138H. DelacroixCredit Administration137A. BergströmCredit Administration119K. OseiCommercial Lending78D. WhitfieldCommercial Lending76R. OkaforCommercial Lending75I. QuinteroRetail & Branch Ops72T. BeaulieuCommercial Lending70
The 8 people carrying the most of this filter, of 24. Narrow the Person control above to read one of them alone.
| When | Who | Channel · destination | Classes | Decision | Outcome | |
|---|---|---|---|---|---|---|
| Aug 12, 2026 at 5:55 PMWeek 10 | D. WhitfieldCommercial Lending | promptChatGPT (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 12, 2026 at 5:47 PMWeek 10 | M. RamaswamyCommercial Lending | uploadChatGPT (personal) | Loan Files | Monitorv5 | — | Chain |
| Aug 12, 2026 at 5:40 PMWeek 10 | C. FerranteFinance | pasteMicrosoft Copilot (consumer) | Account Numbers | Monitorv5 | — | Chain |
| Aug 12, 2026 at 5:22 PMWeek 10 | A. BergströmCredit Administration | pasteChatGPT (personal) | Member PII | Warnv5 | redirected | Chain |
| Aug 12, 2026 at 5:18 PMWeek 10 | J. KowalczykRetail & Branch Ops | pastePerplexity | Account Numbers, Member PII | Monitorv5 | — | Chain |
| Aug 12, 2026 at 5:12 PMWeek 10 | T. BeaulieuCommercial Lending | promptClaude.ai (personal) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 12, 2026 at 5:08 PMWeek 10 | A. BergströmCredit Administration | pasteChatGPT (personal) | Member PII | Warnv5 | abandoned | Chain |
| Aug 12, 2026 at 5:07 PMWeek 10 | V. SokolovIT | promptChatGPT (personal) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 12, 2026 at 4:54 PMWeek 10 | K. OseiCommercial Lending | uploadMicrosoft Copilot (consumer) | Loan Files, Member PII | Redactv5 | — | Chain |
| Aug 12, 2026 at 4:33 PMWeek 10 | J. KowalczykRetail & Branch Ops | promptClaude.ai (personal) | Member PII, Account Numbers | Monitorv5 | — | Chain |
| Aug 12, 2026 at 4:31 PMWeek 10 | A. BergströmCredit Administration | pasteClaude.ai (personal) | Member PII, SSN / Tax ID, Account Numbers | Warnv5 | transformed | Chain |
| Aug 12, 2026 at 4:12 PMWeek 10 | A. BergströmCredit Administration | uploadClaude.ai (personal) | Loan Files, Member PII | Warnv5 | redirected | Chain |
| Aug 12, 2026 at 4:10 PMWeek 10 | H. DelacroixCredit Administration | pasteClaude.ai (personal) | Credit Memos | Monitorv5 | — | Chain |
| Aug 12, 2026 at 4:01 PMWeek 10 | K. OseiCommercial Lending | promptChatGPT (personal) | Account Numbers | Tokenizev5 | — | Chain |
| Aug 12, 2026 at 3:48 PMWeek 10 | H. DelacroixCredit Administration | promptClaude.ai (personal) | Member PII, SSN / Tax ID, Account Numbers | Warnv5 | redirected | Chain |
| Aug 12, 2026 at 3:41 PMWeek 10 | B. MwangiFinance | pasteM365 Copilot | Account Numbers, Member PII | Monitorv5 | — | Chain |
| Aug 12, 2026 at 3:32 PMWeek 10 | C. FerranteFinance | pasteChatGPT (personal) | Account Numbers | Monitorv5 | — | Chain |
| Aug 12, 2026 at 3:29 PMWeek 10 | N. OyelaranCredit Administration | uploadGemini Advanced | Credit Memos, Member PII | Warnv5 | redirectedtrue positive | Chain |
| Aug 12, 2026 at 3:18 PMWeek 10 | F. DuarteIT | promptChatGPT (personal) | API Keys / Creds | Blockv5 | — | Chain |
| Aug 12, 2026 at 3:06 PMWeek 10 | H. DelacroixCredit Administration | pasteClaude.ai (personal) | Loan Files, Member PII | Warnv5 | redirected | Chain |
| Aug 12, 2026 at 3:01 PMWeek 10 | P. NakamuraRetail & Branch Ops | pasteChatGPT (personal) | Account Numbers | Monitorv5 | — | Chain |
| Aug 12, 2026 at 2:55 PMWeek 10 | P. NakamuraRetail & Branch Ops | promptClaude.ai (personal) | Member PII | Monitorv5 | — | Chain |
| Aug 12, 2026 at 2:43 PMWeek 10 | I. QuinteroRetail & Branch Ops | promptGemini Advanced | Account Numbers | Monitorv5 | — | Chain |
| Aug 12, 2026 at 2:33 PMWeek 10 | H. DelacroixCredit Administration | uploadM365 Copilot | Member PII, Account Numbers, SSN / Tax ID, Loan Files | Warnv5 | transformed | Chain |
| Aug 12, 2026 at 2:30 PMWeek 10 | G. IyerIT | pasteMicrosoft Copilot (consumer) | API Keys / Creds | Blockv5 | — | Chain |
Showing 126–150 of 1,144 · page 6 of 46⇤ First← PreviousNext →Last ⇥