LensReading which lens this session carries.
EN10B-1050In flightlow materiality

Finding at investigate

Farrah Lindqvist

Engineering · Security Engineering · EN10B Secret Exposure Response

$8k

value

98%

confidence

21

people affected

1h 19m

age

1h 10m

sla

83%

progress

Currently held by

Threat Modeling Agent

An agent owns the next move

Raised by

Idris Raman

Requester of record

At station

Investigate

Workflow layer · station 5 of 6

Where this train is on the line

EN10BSecret Exposure ResponseTransactional · 6 stations

Detect

21 q

Revoke credential

6 q

Notify

6 q

Rotate

25 q

Investigate

1 live

Close

4 q

Evidence trail

Every station this unit has passed, who acted, and what they left behind

This is the readable trail.

  1. Cleared detect

    -79m

    Vulnerability Scanning Agent

    Spine control pack posted, three-way evidence attached

  2. Cleared revoke credential

    -63m

    Vulnerability Scanning Agent

    Spine control pack posted, three-way evidence attached

  3. Cleared notify

    -47m

    Director, Security Engineering

    Approval recorded with rationale and policy clause cited

  4. Cleared rotate

    -32m

    Vulnerability Scanning Agent

    Spine control pack posted, three-way evidence attached

  5. Holding at investigate

    -16m

    Patch Orchestration Agent

    Inputs, rule version and output hash written to the evidence log

What happens next

The next station and its rule

Close

run by Director, Security Engineering · Policy layer

Held for a named human when the unit exceeds the finding decision envelope, when confidence falls below the floor, or when a policy clause is engaged.

approver Director, Security Engineering

Why the signal is what it is

Derived from time against commitment, not from the state

Amber. Either this item is at or past the time it was committed to and is not material enough to escalate, or it is inside the time but has burned three quarters of it while carrying high or critical materiality. Amber says nothing about who holds it: an item can be amber and moving normally through an agent.

clock 1h 19m against a commitment of 1h 10m · 113% of the time used
materiality low · blast radius 21 records or people downstream
state in-flight — held separately, and deliberately not part of this reading

Past SLA by 9m · 21 people or records downstream of this decision