# Incident report: tenant SYNTHETIC_PITCH_DEMO

## Decision and outcome coverage

Tool decisions: 3; host-reported outcomes: 1; unknown outcomes: 1; conflicting evidence: 0.
Approval is not execution. Receipts are host-reported, not independent observation. No receipt may mean the action did not run, is still running, or collection failed. Activity outside this selection remains unknown. Resource arguments describe intent, not observed effects. Verify the underlying records separately against independently retained trust material.

- `983d77e6-498a-4111-b118-9a96c49c8d2d`: allow / host_reported
- `e5602101-9bff-49eb-9650-75f649fe8d74`: block / blocked_no_execution_evidence
- `60dc76a2-764e-412e-b054-6fc67c279b78`: allow / outcome_unknown

Audit chain valid: **None**

## Call `983d77e6-498a-4111-b118-9a96c49c8d2d`

- What: Read
- When: 2026-10-23 22:14:16 UTC
- Agent: unrecorded (version unrecorded)
- Recorded principal (not verified human initiation): unrecorded
- Verified human requester: unknown
- Agent identity assurance: unknown
- Outcome: {'blocked': False, 'pre_verdict': 'allow', 'post_verdict': 'allow', 'tool_verdict': 'allow', 'hitl_status': 'auto', 'would_block': False}
- Decision path: ComplianceLayer -> IsolationLayer -> SafetyLayer.pre -> ToolGuardLayer -> ReliabilityLayer -> SafetyLayer.post -> ToolGuardLayer.validate_output -> HITLLayer
- Rules fired: none
- Policy digest: `0ea57cf89ab32e1d8041449c03ec0f6b40d08feb556e410ff239abd1ee94ed3e`
- Chain: this `dcfddab490db2fbb...`, in chain: True, erased: False

## Call `e5602101-9bff-49eb-9650-75f649fe8d74`

- What: Delete
- When: 2026-10-23 22:14:17 UTC
- Agent: unrecorded (version unrecorded)
- Recorded principal (not verified human initiation): unrecorded
- Verified human requester: unknown
- Agent identity assurance: unknown
- Outcome: {'blocked': True, 'pre_verdict': 'allow', 'post_verdict': None, 'tool_verdict': 'block', 'hitl_status': 'not_required', 'would_block': False}
- Decision path: ComplianceLayer -> IsolationLayer -> SafetyLayer.pre -> ToolGuardLayer
- Rules fired: none
- Policy digest: `0ea57cf89ab32e1d8041449c03ec0f6b40d08feb556e410ff239abd1ee94ed3e`
- Chain: this `232a7c9c575788a7...`, in chain: True, erased: False

## Call `60dc76a2-764e-412e-b054-6fc67c279b78`

- What: Edit
- When: 2026-10-23 22:14:17 UTC
- Agent: unrecorded (version unrecorded)
- Recorded principal (not verified human initiation): unrecorded
- Verified human requester: unknown
- Agent identity assurance: unknown
- Outcome: {'blocked': False, 'pre_verdict': 'allow', 'post_verdict': 'allow', 'tool_verdict': 'allow', 'hitl_status': 'auto', 'would_block': False}
- Decision path: ComplianceLayer -> IsolationLayer -> SafetyLayer.pre -> ToolGuardLayer -> ReliabilityLayer -> SafetyLayer.post -> ToolGuardLayer.validate_output -> HITLLayer
- Rules fired: none
- Policy digest: `0ea57cf89ab32e1d8041449c03ec0f6b40d08feb556e410ff239abd1ee94ed3e`
- Chain: this `5c6ed80d45db7507...`, in chain: True, erased: False

## Investigator conclusions

Saved finding revisions (evaluated on demand, not continuous monitoring):
- 983d77e6-498a-4111-b118-9a96c49c8d2d: host_reported under rule d2e789a0544e09383bd96af581da25d53831a3b97109e12bad9f8ad82ea78076; source a4d022548cda20cbb60befd846aff3c53e386c67ddf0bdc336b3bd6a083fc1e7
- e5602101-9bff-49eb-9650-75f649fe8d74: blocked_no_execution_evidence under rule d2e789a0544e09383bd96af581da25d53831a3b97109e12bad9f8ad82ea78076; source cf5f05727b7bb1afd9d220bb236e9b7b762126fdefaf080c2219f18275275027
- 60dc76a2-764e-412e-b054-6fc67c279b78: outcome_unknown under rule d2e789a0544e09383bd96af581da25d53831a3b97109e12bad9f8ad82ea78076; source f43b6e2d9c5d3767b2a129833b21195d25ebda17df7a3a1160de9d6b74481bb5
conclusion by synthetic-investigator at 1792793657.2101061:
The Edit was allowed, but execution is not established: its receipt is missing.
Evidence: 60dc76a2-764e-412e-b054-6fc67c279b78 (included)


## Not established

Complete collection, independently observed execution, and causation beyond the cited records are not established. Investigator conclusions are authored interpretations, not changes to original evidence.