[{"data":1,"prerenderedAt":182},["ShallowReactive",2],{"$f7jb4sCDxcurCXfgXxj0MXD0CD5JfQoKnvx8tNQsbWRo":3},{"id":4,"project":5,"kind":6,"slug":7,"label":8,"note":9,"captureCount":10,"momentCount":11,"cycles":12,"origins":14,"surfaces":15,"variants":17,"first":29,"last":32,"moments":35},"page\u002Fphase4-mock-finding-detail","design","page","phase4-mock-finding-detail","Phase4 mock finding detail",null,11,7,[13],"c133",[],[16],"mock",[18,19,20,21,22,23,24,25,26,27,28],"training=assigned","training=recorded","v.corrections=block","training=assigned · F-C","training=recorded · F-C","training=assigned · F-G","training=recorded · F-G","training=assigned · F-H","training=recorded · F-H","training=assigned · F-F","training=assigned · F-I",{"date":30,"src":31},"2026-11-11","\u002Fcycles\u002Fdesign\u002Fc133-finding-training-assigned.png",{"date":33,"src":34},"2026-11-13","\u002Fcycles\u002Fdesign\u002Fc133-approval-seed-finding.png",[36,63,80,104,127,151,167],{"id":37,"cycle":13,"cycleNum":38,"origin":9,"thread":39,"date":30,"capturedAt":42,"surface":16,"paths":43,"variants":45,"newThing":46,"captures":47},"c133~p1-training~2026-11-11~mock",133,{"id":40,"label":41,"date":30},"p1-training","Phase 1 · the content model and one training: Unapproved MCP servers on F-A, in the web app's frame, state by state","2026-11-11T19:58:22.173Z",[44],"\u002Fpages\u002Fphase4\u002Fmock\u002Ffinding-detail",[18,19],"The training on the finding: the policy's assignment as a strip on S1, with the person's state and the path to it",[48,55],{"file":49,"src":31,"full":9,"slices":50,"route":51,"path":44,"caption":52,"variant":18,"capturedAt":42,"cycle":13,"seq":53,"local":54},"c133-finding-training-assigned.png",[],"\u002Fpages\u002Fphase4\u002Fmock\u002Ffinding-detail?findingId=F-A&demo=1","S1 Finding detail with the c133 strip: Unapproved MCP servers, 3 minutes, assigned by the policy on detection, sent to User A on mac-a1, Assigned; nothing is blocked meanwhile (D9); the path opens the training as User A.",0,false,{"file":56,"src":57,"full":58,"slices":59,"route":60,"path":44,"caption":61,"variant":19,"capturedAt":42,"cycle":13,"seq":62,"local":54},"c133-finding-training-recorded.png","\u002Fcycles\u002Fdesign\u002Fc133-finding-training-recorded.png","\u002Fcycles\u002Fdesign\u002Fc133-finding-training-recorded-full.png",[],"\u002Fpages\u002Fphase4\u002Fmock\u002Ffinding-detail?findingId=F-A&at=recorded&demo=1","S1 after completion: the strip reads Recorded, passed 4 of 4 with the time; History has one more row, training completed → open, marked Manual with User A as the actor and the record as its cause; the status did not move (D9).",9,{"id":64,"cycle":13,"cycleNum":38,"origin":9,"thread":65,"date":30,"capturedAt":68,"surface":16,"paths":69,"variants":70,"newThing":71,"captures":72},"c133~p2-record~2026-11-11~mock",{"id":66,"label":67,"date":30},"p2-record","Phase 2 · the record: a count in Reports, a Corrections block on the finding as the proposal, the event shape for Tyler","2026-11-11T20:28:41.383Z",[44],[20],"The Corrections block on the finding: the proposal for when Tyler agrees the event shape (D16)",[73],{"file":74,"src":75,"full":9,"slices":76,"route":77,"path":44,"caption":78,"variant":20,"capturedAt":68,"cycle":13,"seq":79,"local":54},"c133-finding-corrections-block.png","\u002Fcycles\u002Fdesign\u002Fc133-finding-corrections-block.png",[],"\u002Fpages\u002Fphase4\u002Fmock\u002Ffinding-detail?findingId=F-A&at=recorded&v.corrections=block&demo=1","The Corrections block under History on S1 (?v.corrections=block): the record as the audit log keeps it, the sentence that the status did not change, the link to the record page, and the three audit rows. The history row stays the record's home until the shape is agreed.",2,{"id":81,"cycle":13,"cycleNum":38,"origin":9,"thread":82,"date":30,"capturedAt":85,"surface":16,"paths":86,"variants":87,"newThing":88,"captures":89},"c133~p4-accounts~2026-11-11~mock",{"id":83,"label":84,"date":30},"p4-accounts","Phase 4 · pilot 2, Personal accounts for work, on F-C (User A's usera@gmail.com), through the \u002Ftraining skill","2026-11-11T22:53:36.517Z",[44],[21,22],"The second pilot on its finding: Personal account is in use now assigns a training, and F-C's strip offers it",[90,96],{"file":91,"src":92,"full":9,"slices":93,"route":94,"path":44,"caption":95,"variant":21,"capturedAt":85,"cycle":13,"seq":53,"local":54},"c133-accounts-finding-assigned.png","\u002Fcycles\u002Fdesign\u002Fc133-accounts-finding-assigned.png",[],"\u002Fpages\u002Fphase4\u002Fmock\u002Ffinding-detail?findingId=F-C&demo=1","S1 for F-C, the personal account usera@gmail.com on mac-a1: the strip now reads Personal accounts for work, 3 minutes, assigned by the policy on detection, sent to User A, Assigned; nothing is blocked meanwhile.",{"file":97,"src":98,"full":99,"slices":100,"route":101,"path":44,"caption":102,"variant":22,"capturedAt":85,"cycle":13,"seq":103,"local":54},"c133-accounts-finding-recorded.png","\u002Fcycles\u002Fdesign\u002Fc133-accounts-finding-recorded.png","\u002Fcycles\u002Fdesign\u002Fc133-accounts-finding-recorded-full.png",[],"\u002Fpages\u002Fphase4\u002Fmock\u002Ffinding-detail?findingId=F-C&at=recorded&demo=1","S1 for F-C after completion: the strip reads Recorded, passed 4 of 4; History has detect, allowed by Dana's exception, reopened when it ended on 1 November, and now training completed → open: the training is proof, not a resolution (D9).",10,{"id":105,"cycle":13,"cycleNum":38,"origin":9,"thread":106,"date":30,"capturedAt":109,"surface":16,"paths":110,"variants":111,"newThing":112,"captures":113},"c133~p4-secrets~2026-11-11~mock",{"id":107,"label":108,"date":30},"p4-secrets","Phase 4 · pilot 3, Secrets in prompts, on F-G (the one seed finding added to the lab world for it), through the \u002Ftraining skill; the collection complete","2026-11-11T23:01:26.196Z",[44],[23,24],"The third pilot's finding: F-G, an AWS access key in a prompt from Priya's Cursor on mac-eng-07, the one seed finding added for this pilot (marked c133 in the fixture)",[114,120],{"file":115,"src":116,"full":9,"slices":117,"route":118,"path":44,"caption":119,"variant":23,"capturedAt":109,"cycle":13,"seq":53,"local":54},"c133-secrets-finding-assigned.png","\u002Fcycles\u002Fdesign\u002Fc133-secrets-finding-assigned.png",[],"\u002Fpages\u002Fphase4\u002Fmock\u002Ffinding-detail?findingId=F-G&demo=1","S1 for F-G, the lab world's one finding under Credentials must not be sent to a model (added in Phase 4, marked c133): AWS access key AKIA…7Q2F in a prompt from a pasted .env file, Observed, so it reached the model; the strip offers Secrets in prompts, assigned to Priya on mac-eng-07.",{"file":121,"src":122,"full":123,"slices":124,"route":125,"path":44,"caption":126,"variant":24,"capturedAt":109,"cycle":13,"seq":103,"local":54},"c133-secrets-finding-recorded.png","\u002Fcycles\u002Fdesign\u002Fc133-secrets-finding-recorded.png","\u002Fcycles\u002Fdesign\u002Fc133-secrets-finding-recorded-full.png",[],"\u002Fpages\u002Fphase4\u002Fmock\u002Ffinding-detail?findingId=F-G&at=recorded&demo=1","S1 for F-G after completion: the strip reads Recorded, passed 4 of 4; History has detected and training completed → open; the key's rotation is the person's act, the record is proof they know why (D9).",{"id":128,"cycle":13,"cycleNum":38,"origin":9,"thread":129,"date":33,"capturedAt":133,"surface":16,"paths":134,"variants":135,"newThing":136,"captures":137},"c133~inject~2026-11-13~mock",{"id":130,"label":131,"date":132},"inject","Instructions hidden in content (T-INJECT-1), c144 S1's training, on F-H (the seed finding added for it), through the \u002Ftraining skill","2026-11-12","2026-11-13T01:32:32.469Z",[44],[25,26],"S1's training on its finding: F-H, a hidden instruction in issue #482 read through GitHub MCP by Jordan's Claude Code on mac-eng-11, the seed finding added for it (marked c133 in the fixture)",[138,144],{"file":139,"src":140,"full":9,"slices":141,"route":142,"path":44,"caption":143,"variant":25,"capturedAt":133,"cycle":13,"seq":53,"local":54},"c133-inject-finding-assigned.png","\u002Fcycles\u002Fdesign\u002Fc133-inject-finding-assigned.png",[],"\u002Fpages\u002Fphase4\u002Fmock\u002Ffinding-detail?findingId=F-H&demo=1","F-H, the lab world's one finding under Prompts are inspected for injection and leakage (added 2026-11-12 for c144 S1, marked c133): Instruction override in issue #482, read through GitHub MCP (score 0.91), Observed, as the policy can only observe; the strip offers Instructions hidden in content, assigned to Jordan on mac-eng-11.",{"file":145,"src":146,"full":147,"slices":148,"route":149,"path":44,"caption":150,"variant":26,"capturedAt":133,"cycle":13,"seq":62,"local":54},"c133-inject-finding-recorded.png","\u002Fcycles\u002Fdesign\u002Fc133-inject-finding-recorded.png","\u002Fcycles\u002Fdesign\u002Fc133-inject-finding-recorded-full.png",[],"\u002Fpages\u002Fphase4\u002Fmock\u002Ffinding-detail?findingId=F-H&at=recorded&demo=1","F-H after completion: the strip reads Recorded, passed 4 of 4; History has detected and training completed → open.",{"id":152,"cycle":13,"cycleNum":38,"origin":9,"thread":153,"date":33,"capturedAt":156,"surface":16,"paths":157,"variants":158,"newThing":159,"captures":160},"c133~wave1~2026-11-13~mock",{"id":154,"label":155,"date":33},"wave1","The four trainings c144's wave 1 wanted: Approved model providers, Skills that update themselves, Ask before an agent sends or publishes, Unattended agents and their spend","2026-11-13T18:01:57.211Z",[44],[27],"Approved model providers on its finding in the base world: F-F, Priya's request to deepseek.com, blocked",[161],{"file":162,"src":163,"full":9,"slices":164,"route":165,"path":44,"caption":166,"variant":27,"capturedAt":156,"cycle":13,"seq":53,"local":54},"c133-wave1-providers-finding.png","\u002Fcycles\u002Fdesign\u002Fc133-wave1-providers-finding.png",[],"\u002Fpages\u002Fphase4\u002Fmock\u002Ffinding-detail?findingId=F-F&theatre=off&demo=1","F-F, Priya's Cursor on priya-x1 sending a request to deepseek.com, blocked under Approved model providers only; the strip offers Approved model providers (T-PROVIDERS-1), assigned to Priya.",{"id":168,"cycle":13,"cycleNum":38,"origin":9,"thread":169,"date":33,"capturedAt":172,"surface":16,"paths":173,"variants":174,"newThing":175,"captures":176},"c133~approval-seed~2026-11-13~mock",{"id":170,"label":171,"date":33},"approval-seed","F-I, the seed finding for Ask before an agent sends or publishes (Mark's ruling at the review-9 walk)","2026-11-13T18:31:24.498Z",[44],[28],"F-I, the seed finding added for the approval training: Hana's Claude Code merges a pull request through GitHub MCP with approval set to never",[177],{"file":178,"src":34,"full":9,"slices":179,"route":180,"path":44,"caption":181,"variant":28,"capturedAt":172,"cycle":13,"seq":53,"local":54},"c133-approval-seed-finding.png",[],"\u002Fpages\u002Fphase4\u002Fmock\u002Ffinding-detail?findingId=F-I&theatre=off&demo=1","F-I, the lab world's one finding under Consequential tool calls require approval (added 2026-11-13, marked c133): github.merge_pull_request ran without approval, #517 into main; Observed; the strip offers Ask before an agent sends or publishes, assigned to Hana on mac-eng-05.",1794599371651]