LensReading which lens this session carries.
IT7C-1033Evidence postedmedium materiality

Alert at legal notify

Naomi Sandoval

Information Technology · Cybersecurity Operations · IT7C Major Incident

$61k

value

78%

confidence

24

people affected

7h 51m

age

7h 56m

sla

63%

progress

Currently held by

Security Policy Agent

An agent owns the next move

Raised by

Clara Muller

Requester of record

At station

Legal notify

Policy layer · station 5 of 8

Where this train is on the line

IT7CMajor IncidentTransactional · 8 stations

Declare

7 q

Contain

46 q

Human commander

4 q

Assess exposure

39 q

Legal notify

1 live

Restore

14 q

Post-mortem

22 q

Board report

0 q

Evidence trail

Every station this unit has passed, who acted, and what they left behind

This is the readable trail.

  1. Cleared declare

    -471m

    Director, Security Operations

    Approval recorded with rationale and policy clause cited

  2. Cleared contain

    -377m

    Threat Intelligence Agent

    Inputs, rule version and output hash written to the evidence log

  3. Cleared human commander

    -283m

    Director, Security Operations

    Approval recorded with rationale and policy clause cited

  4. Cleared assess exposure

    -188m

    Forensics Support Agent

    Inputs, rule version and output hash written to the evidence log

  5. Holding at legal notify

    -94m

    Director, Security Operations

    Inputs, rule version and output hash written to the evidence log

What happens next

The next station and its rule

Restore

run by Vulnerability Agent · Workflow layer

No gate here. The agent clears this station inside its envelope and posts evidence.

Why the signal is what it is

Derived from time against commitment, not from the state

Green. This item is still inside the time it was committed to, and it is not close enough to that line for its materiality to pull it forward. Green says nothing about who holds it: an item can be green and sitting with a person.

clock 7h 51m against a commitment of 7h 56m · 99% of the time used
materiality medium · blast radius 24 records or people downstream
state evidence-posted — held separately, and deliberately not part of this reading