A training is four things

c1332026-11-10

Trigger, lesson, check, record: a finding becomes a lesson and completion becomes proof in the audit log.

Source: c133 plan.md §The shape, R1–R6, D1–D9 (D9 ruled 2026-11-09); c137 plan.md (the bones; D1: the plane holds the record; a training assignment is a message type); c128 (Reports); problem:enforcement-without-local-context, promoted 2026-11-09 from session 1b21a3ce (Mark Peterson, first-hand advisor, standing observed).

Who assigns

▤A policy

a training field on the policy (c121's model): on this finding, require this training. First (D2).

●An operator

from a finding, on the web app. Second (D2).

◇HQ

a notice or a censure, in HQ's words, never rewritten (R6). Third (D2).

●The person

on their own, from a library on the web app. Later.

one c137 message: training-assignment · severity attention · one action, start-training (D8)

1Trigger

A finding, a policy's enforcement, a censure from HQ, or an assignment. Shows in the native app's message; a link from the web app.

2Lesson

One to three minutes: an illustration or animation, a few sentences, what to do instead. Names what happened on this machine (R2). A page on the web app (D1).

3Check

One to three questions that verify the concept, not recall (R3). All right to pass, retake allowed (D3). The same page.

4Record

Completion, the check's final result and the finding it answers; nothing about time or tries (R4). The audit log, the finding's history, Reports.

completion goes back the same way: training-completed, in the assignment's thread (D8)

◇The plane

holds the assignment and the record; the operator's view of both (c137 D1)

training-assignment

▣The native app's inbox

the person's notice; the tray by default for trainings (c137)

start-training

▭The training page

lesson and check, in the web app's frame (c134)

training-completed

⬓The audit log

proof of correction: completion, linked to the finding; the finding's history and Reports read it

⬓The lesson's data

the finding, the policy, the person and the session are already in the lab world; the lesson is composed from them, with a hand-written core per hazard

D9 · blocking

A training can in theory block access (no model access until taken). By default it does not: completion is recorded, not enforced. Ruled 2026-11-09.

Three pilots (D6), on the lab's top policies, reviewed one at a time

Secrets in prompts

a credential sent to a provider inside a prompt; a lesson, a check, illustrations (D7: no video)

Personal accounts for work

company work through a personal provider account; a lesson, a check, illustrations

Unapproved MCP servers

an MCP server outside the approved list; a lesson, a check, illustrations

ours to build (c133)the one key thing: the record as proof of correctionexists today (the finding, the policy, the person, the session in the lab world)HQ's words (notices, censures)planned (the pilots, the library)

The problem

When qcontrol blocks or flags something, the person at the keyboard sees a disruption and nothing else, and the operator sees a finding with no sign the person understood. Mark Peterson asked for local feedback with a path to IT. We are the only party who sees both the violation and the person.

The core idea

The finding is a teaching moment. A training is four things, trigger plus protocol: the trigger is a message (c137's one schema, no channel of its own); the lesson, the check and the record are the protocol every training keeps, so a new hazard is content, not a new flow. Short, about this hazard, respectful: a safety briefing, not a reprimand.

What is open

The gate: c137's bones and the brief in market-analyst. The record's event shape, with Tyler. Whether completion is personnel data, and who may see it (question 2). Languages beyond English for the pilots. Blocking stays off by default (D9).