The copy of S1 in the operator's words: the crumb, the policy with the status and the outcome at detection, What happened | Why it violates, History (each line marked Manual · Re-evaluation · System), Details, Related Findings (same session, same policy) and Session. Rows are the world's derived findings; every event so far is the machine's own (detect, prevented, recurred).

Decided, not copied: Resolve and "Too noisy? Change the policy's mode" are not drawn (the person never moves a finding's status); User, Team and Endpoint leave Details for the harness (rule 3); the Configuration names the version without linking to Policy Config, a plane page; the c133 training strip waits for a world with a training-assigned event (c147 Q5); Session links to Activity instead of the transcript panel, which the native app doesn't have.