A never-expiring OAuth grant was used from an unrecognised network path to assume a privileged service identity. Result: Path from m.chen to svc-ledger-prod no longer traversable. Residual paths remain via the ledger secret. Rollback: Re-consent flow; user re-authorises the integration.

Petavora autonomy engine · CS-AUTO-01 · INC-2471 · confidence 94%

Level 2 enrichment triggered by a privileged-identity assumption outside the change window. Result: Investigation handed to the policy engine; no environment change made.

Petavora autonomy engine · CS-AUTO-02 · INC-2471 · confidence 99%

Signing key read by a service identity that had just been assumed through the revoked grant. Result: Payments-api signing healthy after 38 s. One failed signature retried successfully. Rollback: Restore prior key version from the secret store (available for 24 h).

Petavora autonomy engine · CS-AUTO-04 · INC-2471 · confidence 91%

Observed behaviour outside the declared purpose: payroll read attempt and vendor bank-detail writes. Result: No further out-of-scope calls observed. Two invoice drafts queued for human completion. Rollback: Restore previous agent policy version (v7).

Petavora autonomy engine · CS-AUTO-03 · INC-2473 · confidence 89%

Identity is the origin of the confirmed path. Disabling would remove the remaining human entry point. Result: Pending human decision. Rollback: Re-enable the account; group membership is preserved.

Petavora autonomy engine · CS-AUTO-08 · INC-2471 · confidence 86%

Predicted next step on the modelled path is a bulk read of the customer vault. Result: Pending human decision. Rollback: Remove the temporary deny rule.

Petavora autonomy engine · CS-AUTO-07 · INC-2471 · confidence 90%

Pre-emptive narrowing on a predicted enumeration path toward customer records. Result: Pending human decision. Rollback: Re-grant from the recorded prior role binding.

Petavora autonomy engine · CS-AUTO-06 · INC-2468 · confidence 93%

Candidate containment generated by the simulator for a suspected data-staging pattern. Result: Downgraded to a recommendation for the incident commander.

Petavora autonomy engine · CS-AUTO-10 · INC-2470 · confidence 71%

Impossible-travel signal between two sign-ins 11 minutes apart. Result: User confirmed the Frankfurt sign-in was their own corporate VPN. Action reversed. Rollback: User signs in again; no state is lost.

Petavora autonomy engine · CS-AUTO-02 · INC-2466 · confidence 82%

Petavora recommended removal; the integration held an unused write scope on the vendor database. Result: Integration disabled; no service impact reported. Rollback: Re-enable the integration and replay the queued jobs.

P. Konadu · Security Admin · CS-AUTO-09 · INC-2465 · confidence 88%

Denied payroll.employee_compensation read

Petavora policy engine · CS-AGENT-03

Bulk read flagged for review

Behaviour model · CS-AGENT-02

3 vendor bank_details records modified

agt_fin_4b19 · CS-AGENT-04

Refused · payroll.compensation

agt_hr_77d3 · CS-AGENT-03

Approved learning — Ninety nights of identical behaviour; content and destination checks stay active.

P. Konadu · Security Admin · Learning guardrail · human decision required

Rejected learning — Bulk export of customer records must keep a human in the loop regardless of pattern.

A. Mensah · Data Protection · Learning guardrail · human decision required

Edited policy instead — Accepted for the hotfix pipeline only; filed as exception CS-EXC-141 with a June review date.

P. Konadu · Security Admin · Learning guardrail · human decision required

Ignored suggestion — Deferred until the image rollout completes; suggestion may be re-raised afterwards.

P. Konadu · Security Admin · Learning guardrail · human decision required