Pages
Findings Status Column v1
Source: c79 finding-lifecycle — status-column bake-off · 2026-08-26
Four treatments of a Status column for the findings worklist, same world in each. All four slim the SLA column to pure clock (numbers and dates only) — the status word lives in exactly one column. B and the two hybrids are live: selecting a handling value appends the event and the row re-derives. Adjudicate buttons are inert on this page.
A · Static chip
Read-only status chip. Zero interaction risk, zero quick access — acknowledging still costs opening the Adjudicate card.
Severity | Finding | Occurrences | Last Seen | Agent | Status | SLA | |
|---|---|---|---|---|---|---|---|
| high | agent: Claude Code · sofia Unapproved tool use · Magnitude: 150+ unapproved calls in one week across 12 tools | ×200 tool calls | 15h ago | Claude Code · sofia | acknowledged | 11d/30d · due 09-04 | |
| medium | agent: Codex · ravi Unapproved tool use · 4 distinct unapproved tools, low volume | ×14 tool calls | 13h ago | Codex · ravi | unacknowledged | 2d/90d · due 11-12 | |
| high | file: secrets.yaml Sensitive file access · secrets.yaml read in agent session | ×3 opens | 1d ago | Claude Code · sofia | escalated | 2d/30d · due 09-13 | |
| medium | file: .env.production Sensitive file access · .env.production opened once, no redaction record | ×1 opens | 16h ago | Cursor · dana | unacknowledged | 0d/90d · due 11-14 | |
| medium | destination: api.telemetry-relay.io Non-allowlisted egress · Vendor SDK phone-home — allow/block decision pending vendor review 2026-08-19 | ×47 connections | 14h ago | Codex · ravi | acknowledged | 7d/90d · due 11-08 | |
| high | destination: paste.dropzone.sh Non-allowlisted egress · Egress to paste site — blocked, then resolved | ×3 connections | 35d ago | Claude Code · kai | resolved | in 0d | |
| medium | agent-config: marcus-mba Sandbox required · Owner on leave until 2026-08-24; compensating control: session-level file policy active | ×3 runs | 12d ago | Claude Code · marcus | risk accepted | paused · exp 09-15 | |
| medium | machine: ext-jmv-laptop Agent registration · Contractor device out of scope — covered by MDM policy, not the agent estate | ×1 installs | 6d ago | — | ignored | — | |
| medium | machine: chen-mba Agent registration · Windsurf install outside monitoring | ×1 installs | 18h ago | — | unacknowledged | 0d/90d · due 11-14 | |
| low | agent: Codex · felix Session budget exceeded · Token spend 6× baseline in one session | ×1 sessions | 7d ago | Codex · felix | resolved | in 1d | |
B · Dropdown everywhere
Every row is a select listing the full ladder. The honest failure on display: risk accepted / ignored / resolved can never be selectable (they need reasons, or belong to the system), so half the menu is permanently grey — a control that promises more than it can do.
Severity | Finding | Occurrences | Last Seen | Agent | Status | SLA | |
|---|---|---|---|---|---|---|---|
| high | agent: Claude Code · sofia Unapproved tool use · Magnitude: 150+ unapproved calls in one week across 12 tools | ×200 tool calls | 15h ago | Claude Code · sofia | 11d/30d · due 09-04 | ||
| medium | agent: Codex · ravi Unapproved tool use · 4 distinct unapproved tools, low volume | ×14 tool calls | 13h ago | Codex · ravi | 2d/90d · due 11-12 | ||
| high | file: secrets.yaml Sensitive file access · secrets.yaml read in agent session | ×3 opens | 1d ago | Claude Code · sofia | 2d/30d · due 09-13 | ||
| medium | file: .env.production Sensitive file access · .env.production opened once, no redaction record | ×1 opens | 16h ago | Cursor · dana | 0d/90d · due 11-14 | ||
| medium | destination: api.telemetry-relay.io Non-allowlisted egress · Vendor SDK phone-home — allow/block decision pending vendor review 2026-08-19 | ×47 connections | 14h ago | Codex · ravi | 7d/90d · due 11-08 | ||
| high | destination: paste.dropzone.sh Non-allowlisted egress · Egress to paste site — blocked, then resolved | ×3 connections | 35d ago | Claude Code · kai | in 0d | ||
| medium | agent-config: marcus-mba Sandbox required · Owner on leave until 2026-08-24; compensating control: session-level file policy active | ×3 runs | 12d ago | Claude Code · marcus | paused · exp 09-15 | ||
| medium | machine: ext-jmv-laptop Agent registration · Contractor device out of scope — covered by MDM policy, not the agent estate | ×1 installs | 6d ago | — | — | ||
| medium | machine: chen-mba Agent registration · Windsurf install outside monitoring | ×1 installs | 18h ago | — | 0d/90d · due 11-14 | ||
| low | agent: Codex · felix Session budget exceeded · Token spend 6× baseline in one session | ×1 sessions | 7d ago | Codex · felix | in 1d | ||
C · Hybrid (recommended)
Open findings get a handling dropdown (the clock-neutral verbs — safe for one click); terminal findings get the static chip. Same control as the Adjudicate card's Status, demoted into the row.
Severity | Finding | Occurrences | Last Seen | Agent | Status | SLA | |
|---|---|---|---|---|---|---|---|
| high | agent: Claude Code · sofia Unapproved tool use · Magnitude: 150+ unapproved calls in one week across 12 tools | ×200 tool calls | 15h ago | Claude Code · sofia | 11d/30d · due 09-04 | ||
| medium | agent: Codex · ravi Unapproved tool use · 4 distinct unapproved tools, low volume | ×14 tool calls | 13h ago | Codex · ravi | 2d/90d · due 11-12 | ||
| high | file: secrets.yaml Sensitive file access · secrets.yaml read in agent session | ×3 opens | 1d ago | Claude Code · sofia | 2d/30d · due 09-13 | ||
| medium | file: .env.production Sensitive file access · .env.production opened once, no redaction record | ×1 opens | 16h ago | Cursor · dana | 0d/90d · due 11-14 | ||
| medium | destination: api.telemetry-relay.io Non-allowlisted egress · Vendor SDK phone-home — allow/block decision pending vendor review 2026-08-19 | ×47 connections | 14h ago | Codex · ravi | 7d/90d · due 11-08 | ||
| high | destination: paste.dropzone.sh Non-allowlisted egress · Egress to paste site — blocked, then resolved | ×3 connections | 35d ago | Claude Code · kai | resolved | in 0d | |
| medium | agent-config: marcus-mba Sandbox required · Owner on leave until 2026-08-24; compensating control: session-level file policy active | ×3 runs | 12d ago | Claude Code · marcus | risk accepted | paused · exp 09-15 | |
| medium | machine: ext-jmv-laptop Agent registration · Contractor device out of scope — covered by MDM policy, not the agent estate | ×1 installs | 6d ago | — | ignored | — | |
| medium | machine: chen-mba Agent registration · Windsurf install outside monitoring | ×1 installs | 18h ago | — | 0d/90d · due 11-14 | ||
| low | agent: Codex · felix Session budget exceeded · Token spend 6× baseline in one session | ×1 sessions | 7d ago | Codex · felix | resolved | in 1d | |
C2 · Hybrid, quiet until hover
Same behavior as C, but the closed control reads as plain text — border appears on hover. Less chrome in a ten-row table; the cost is discoverability.
Severity | Finding | Occurrences | Last Seen | Agent | Status | SLA | |
|---|---|---|---|---|---|---|---|
| high | agent: Claude Code · sofia Unapproved tool use · Magnitude: 150+ unapproved calls in one week across 12 tools | ×200 tool calls | 15h ago | Claude Code · sofia | 11d/30d · due 09-04 | ||
| medium | agent: Codex · ravi Unapproved tool use · 4 distinct unapproved tools, low volume | ×14 tool calls | 13h ago | Codex · ravi | 2d/90d · due 11-12 | ||
| high | file: secrets.yaml Sensitive file access · secrets.yaml read in agent session | ×3 opens | 1d ago | Claude Code · sofia | 2d/30d · due 09-13 | ||
| medium | file: .env.production Sensitive file access · .env.production opened once, no redaction record | ×1 opens | 16h ago | Cursor · dana | 0d/90d · due 11-14 | ||
| medium | destination: api.telemetry-relay.io Non-allowlisted egress · Vendor SDK phone-home — allow/block decision pending vendor review 2026-08-19 | ×47 connections | 14h ago | Codex · ravi | 7d/90d · due 11-08 | ||
| high | destination: paste.dropzone.sh Non-allowlisted egress · Egress to paste site — blocked, then resolved | ×3 connections | 35d ago | Claude Code · kai | resolved | in 0d | |
| medium | agent-config: marcus-mba Sandbox required · Owner on leave until 2026-08-24; compensating control: session-level file policy active | ×3 runs | 12d ago | Claude Code · marcus | risk accepted | paused · exp 09-15 | |
| medium | machine: ext-jmv-laptop Agent registration · Contractor device out of scope — covered by MDM policy, not the agent estate | ×1 installs | 6d ago | — | ignored | — | |
| medium | machine: chen-mba Agent registration · Windsurf install outside monitoring | ×1 installs | 18h ago | — | 0d/90d · due 11-14 | ||
| low | agent: Codex · felix Session budget exceeded · Token spend 6× baseline in one session | ×1 sessions | 7d ago | Codex · felix | resolved | in 1d | |
Composition notes
- One variable: all four share the slimmed SLA column (pure clock — 11d/30d · due 09-04, paused · exp 09-15, in 2d, —) so the Status treatment is the only thing changing between sections.
- The axis rule decides what's selectable: handling verbs (acknowledge/escalate/enforce) are clock-neutral with no mandatory fields — safe for one-click. Adjudication values (risk accepted, ignored) demand reasons and stay behind the Adjudicate card; resolved is the system's. B shows what ignoring that looks like: a select where half the menu is permanently grey.
- Unacknowledged wears the warning tone in every variant — the "nobody has looked" signal, scannable down the column.
- Escalated/enforced chips carry their ref on hover (title attr) — the stamp stays one hover away without widening the column.
- Verdict (2026-08-26): C — status as a dropdown; graduated to regroup-v2 with the slimmed SLA column.
- Each section runs its own world clone — acting in one doesn't move the others. Winner graduated to findings-regroup-v2.