Signed in asM. HalloranCompliance officer · Compliance/BSAThe console in full: every actor, every event, the adjudication queue, and the actions on the pending policy proposal.
Provenance · one movement, end to end
M. Ramaswamy — paste to M365 Copilot
Jul 27, 2026 at 4:41 PM · Week 8 · event b65dc26d-629c-4ae7-9776-c3f9f430bdedActor
M. Ramaswamy — Relationship manager, Commercial Lending · Lending role groupThe role group is what the policy engine resolves against; the department is what the console cuts by. The event carries both, so no projection has to join.
Content
Summarize the credit file for loan CL-2026-66961 — borrower Wren Winterbourne, guarantor on the Kettering-Freight Systems relationship. Focus on covenant history and past-due notes.
proved by a checksum or a format rule · matched by a pattern, which is a shape, or by the taxonomy or the institution’s dictionary, which are vocabulary markers — neither is a proof
| Data class | Offsets | Proof | Detector |
|---|---|---|---|
| Loan Files | 35–48 | pattern match — a shape, not a proof | pat-loan |
| Member PII | 60–77 | pattern match — a shape, not a proof | cmb-member-pii |
Decision
Warn under policy v4, in force from Jul 20, 2026.The cells that decided it, for the Lending role group: Loan Files — Monitor; Member PII — Warn.
Transform
Redact · 2 span(s) masked, 0 replaced by a format-preserving token.Re-derived here from the stored spans, not read from a stored copy — a redaction that cannot be reproduced from the record is a redaction an examiner cannot check.
Summarize the credit file for loan █████████████ — borrower █████████████████, guarantor on the Kettering-Freight Systems relationship. Focus on covenant history and past-due notes.
Destination
M365 Copilot — enterprise, sanctionedThe enterprise tenant, allow-listed per data class — sanctioned is not the same as unrestricted.
Loan FilesallowedPermitted; the tenant is in scope for the institution’s information security program.Member PIIallowedPermitted; the tenant is contracted and in scope for the institution’s information security program.
Outcome
The user transformed after the card.Triage marked it true positive — M. Halloran, Jul 27, 2026 at 5:30 PM. Open in Triage
The record
- captured Jul 27, 2026 at 4:41 PMM. Ramaswamy (Relationship manager, Commercial Lending) — paste to M365 Copilot.
- classified Jul 27, 2026 at 4:41 PM2 spans in loan_files, member_pii; proof recorded on each span.
- decided Jul 27, 2026 at 4:41 PMwarn under policy v4, from the member_pii cell for the lending role group.
- transformed Jul 27, 2026 at 4:41 PMSafe transform taken on the coach card: 2 span(s) masked in place by offset. Warn does not rewrite anything by itself — the person chose this. The tokenize option is not on for the account_numbers cell in the lending role group under v4, so every span is masked.
- submitted Jul 27, 2026 at 4:41 PMSubmitted to M365 Copilot after transformation; the original text was not sent.
- adjudicated Jul 27, 2026 at 5:30 PMMarked a true positive by M. Halloran in triage.
The same chain in JSON: /api/v1/events?id=b65dc26d…
Events · the log itself
1,144 events matching trailing 30 days
Jul 16 – Aug 14, 2026. Every row drills to the full provenance chain, and every state on this page — filters, page and drill alike — is a URL you can paste to a colleague. The same query as JSON: /api/v1/events?scope=windowWho sent them — 24 people across 1,144 events
N. OyelaranCredit Administration138H. DelacroixCredit Administration137A. BergströmCredit Administration119K. OseiCommercial Lending78D. WhitfieldCommercial Lending76R. OkaforCommercial Lending75I. QuinteroRetail & Branch Ops72T. BeaulieuCommercial Lending70
The 8 people carrying the most of this filter, of 24. Narrow the Person control above to read one of them alone.
| When | Who | Channel · destination | Classes | Decision | Outcome | |
|---|---|---|---|---|---|---|
| Jul 28, 2026 at 9:19 AMWeek 8 | L. TranRetail & Branch Ops | promptMicrosoft Copilot (consumer) | API Keys / Creds | Blockv4 | — | Chain |
| Jul 28, 2026 at 9:12 AMWeek 8 | R. OkaforCommercial Lending | uploadChatGPT (personal) | Loan Files, Member PII | Warnv4 | redirected | Chain |
| Jul 28, 2026 at 9:12 AMWeek 8 | R. OkaforCommercial Lending | pasteChatGPT (personal) | Credit Memos, Member PII | Warnv4 | abandoned | Chain |
| Jul 28, 2026 at 8:53 AMWeek 8 | R. CastellanoCompliance/BSA | promptChatGPT (personal) | Member PII | Monitorv4 | — | Chain |
| Jul 28, 2026 at 8:51 AMWeek 8 | A. BergströmCredit Administration | promptChatGPT (personal) | Member PII, Account Numbers | Warnv4 | redirected | Chain |
| Jul 28, 2026 at 8:27 AMWeek 8 | T. BeaulieuCommercial Lending | pasteChatGPT (personal) | Loan Files, Member PII | Warnv4 | redirected | Chain |
| Jul 28, 2026 at 8:06 AMWeek 8 | A. BergströmCredit Administration | pasteGemini Advanced | Credit Memos, Member PII | Warnv4 | abandoned | Chain |
| Jul 28, 2026 at 8:00 AMWeek 8 | H. DelacroixCredit Administration | uploadChatGPT (personal) | Loan Files, Member PII | Warnv4 | redirected | Chain |
| Jul 27, 2026 at 5:29 PMWeek 8 | D. WhitfieldCommercial Lending | uploadChatGPT (personal) | Loan Files, Member PII | Warnv4 | redirected | Chain |
| Jul 27, 2026 at 5:15 PMWeek 8 | B. MwangiFinance | pasteChatGPT (personal) | Member PII, Account Numbers | Monitorv4 | — | Chain |
| Jul 27, 2026 at 4:55 PMWeek 8 | N. OyelaranCredit Administration | promptClaude.ai (personal) | Member PII | Warnv4 | transformed | Chain |
| Jul 27, 2026 at 4:46 PMWeek 8 | A. BergströmCredit Administration | pasteChatGPT (personal) | Credit Memos | Monitorv4 | — | Chain |
| Jul 27, 2026 at 4:41 PMWeek 8 | M. RamaswamyCommercial Lending | pasteM365 Copilot | Loan Files, Member PII | Warnv4 | transformedtrue positive | Chain |
| Jul 27, 2026 at 4:28 PMWeek 8 | K. OseiCommercial Lending | promptChatGPT (personal) | Account Numbers, Member PII | Warnv4 | overridden | Chain |
| Jul 27, 2026 at 4:18 PMWeek 8 | K. OseiCommercial Lending | promptM365 Copilot | Account Numbers | Monitorv4 | — | Chain |
| Jul 27, 2026 at 3:39 PMWeek 8 | N. OyelaranCredit Administration | pasteM365 Copilot | Member PII | Warnv4 | abandoned | Chain |
| Jul 27, 2026 at 3:38 PMWeek 8 | H. DelacroixCredit Administration | pasteGemini Advanced | Member PII | Warnv4 | abandoned | Chain |
| Jul 27, 2026 at 3:35 PMWeek 8 | B. MwangiFinance | pasteChatGPT (personal) | Account Numbers, Member PII | Monitorv4 | — | Chain |
| Jul 27, 2026 at 3:34 PMWeek 8 | N. OyelaranCredit Administration | pasteMicrosoft Copilot (consumer) | Credit Memos, Member PII | Warnv4 | transformed | Chain |
| Jul 27, 2026 at 3:27 PMWeek 8 | J. KowalczykRetail & Branch Ops | pasteGemini Advanced | Account Numbers | Monitorv4 | — | Chain |
| Jul 27, 2026 at 3:01 PMWeek 8 | E. LindqvistFinance | pasteChatGPT (personal) | Account Numbers | Monitorv4 | — | Chain |
| Jul 27, 2026 at 2:47 PMWeek 8 | N. OyelaranCredit Administration | pasteMicrosoft Copilot (consumer) | Member PII, SSN / Tax ID, Account Numbers | Warnv4 | transformed | Chain |
| Jul 27, 2026 at 2:24 PMWeek 8 | T. BeaulieuCommercial Lending | promptClaude.ai (personal) | Loan Files, Member PII | Warnv4 | overridden | Chain |
| Jul 27, 2026 at 2:19 PMWeek 8 | L. TranRetail & Branch Ops | promptChatGPT (personal) | Account Numbers, Member PII | Monitorv4 | — | Chain |
| Jul 27, 2026 at 2:16 PMWeek 8 | T. BeaulieuCommercial Lending | promptChatGPT (personal) | Loan Files | Monitorv4 | — | Chain |
Showing 776–800 of 1,144 · page 32 of 46⇤ First← PreviousNext →Last ⇥