Alert Triage: environment #2, built end to end by the pipeline
The first environment shipped through .claude/workflows/new-environment.js: specification, three adversarial reviews (all 'fixable', none fatal), the Python environment, the TypeScript port, captured rollouts, and the demo page. Eleven agents, no errors. The proof that the platform scales is one line long. Alert Triage has a completely different shape from Word Five — JSON actions, priced lookups, an analyst screen instead of a grid — and the only change under src/components/demo/ is a comment edit, because the isolation lint refused the word "wordle" there. Zero shell code changed. 415 contract checks now pass against two demos, up from 206 against one. The environment is honest by construction. Every alert is synthetic, generated from the seed, and the banner saying so sits inside the board surface. Two of the eleven scenario templates are hidden-suspicious: generated by the same code as their benign twin with the signal overlaid only in lookup data, so the free screen is identically distributed and a screen-only policy STRUCTURALLY cannot tell them apart. The probe ladder measures it: `fast` catches 0.0 of hidden seeds. That is the counterweight made real rather than asserted. Twelve policies, thirteen ladder assertions, a genuine three-way trade: fast 0.846 wins hours (0.85), misses every hidden case targeted 0.894 wins the shipped total thorough 0.820 wins evidence (1.00), spends 2.9 hours None dominates. 92 Python tests, 35 TypeScript tests, 65 fixtures replaying at delta 0, and conformance gated on world + scorer + protocol so the browser shows the same alert for ?seed= that Python generated. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019mt6sHQHEnEYrJZvoMCJSB
This commit is contained in:
karti-ai
@@ -0,0 +1,92 @@
|
||||
{
|
||||
"runId": "base-off-s1",
|
||||
"seed": 1,
|
||||
"model": "brain-qwen38-dspark",
|
||||
"capturedAt": "2026-08-28",
|
||||
"rewards": {
|
||||
"caught": 1.0,
|
||||
"hours": 0.55,
|
||||
"evidence": 0.2857142857142857
|
||||
},
|
||||
"metrics": {
|
||||
"hours_spent": 1.0,
|
||||
"reference_hours": 0.55,
|
||||
"lookups": 1.0,
|
||||
"turns_used": 2.0,
|
||||
"rejected_replies": 0.0,
|
||||
"false_escalation": 0.0,
|
||||
"missed": 0.0,
|
||||
"typology_match": null
|
||||
},
|
||||
"truncated": false,
|
||||
"outcome": "solved",
|
||||
"info": {
|
||||
"label": "benign",
|
||||
"template": "B4",
|
||||
"overlay": null,
|
||||
"typology": null,
|
||||
"planted": [
|
||||
[
|
||||
"kyc.expected_monthly_cash"
|
||||
],
|
||||
[
|
||||
"kyc.expected_monthly_cash",
|
||||
"kyc.business_type"
|
||||
]
|
||||
],
|
||||
"reference_minutes": 33,
|
||||
"reference_policy": "fast",
|
||||
"held_out": false,
|
||||
"tier": "benign",
|
||||
"screen": "ALERT A-8971 rule R-STR-01 \u2014 Three or more cash deposits just under the reporting threshold within ten days\n fired 2026-04-26\n triggering transactions:\n T-213 2026-04-16 cash_in 9,440.00 USD branch BR-052\n T-217 2026-04-21 cash_in 8,950.00 USD branch BR-052\n T-219 2026-04-22 cash_in 8,880.00 USD branch BR-052\nKYC FILE C-9647 Oakhill Kitchen Group\n kyc.account_opened = 2019-07-11\n kyc.business_type = pizzeria\n kyc.country = United States\n kyc.customer_type = business\n kyc.expected_activity = Cash-intensive food service; daily takings deposited most trading days.\n kyc.expected_monthly_cash = 86,000.00 USD\n kyc.kyc_refreshed = 2026-03-13\n kyc.pep = False\n kyc.prior_alerts = 4\n kyc.prior_sars = 0\n kyc.remittance_declared = none declared\n kyc.stated_income = 492,000.00 USD\nTWELVE-MONTH SUMMARY (USD)\n month cash in cash out wires in wires out ach in ach out txns\n 2025-05 42,400 0 0 0 0 13,935 18\n 2025-06 38,160 0 0 0 0 12,582 19\n 2025-07 44,260 0 0 0 0 15,928 18\n 2025-08 41,680 0 0 0 0 13,940 18\n 2025-09 44,950 0 0 0 0 15,498 17\n 2025-10 35,860 0 0 0 0 13,284 19\n 2025-11 42,370 0 0 0 0 12,792 19\n 2025-12 39,280 0 0 0 0 13,776 19\n 2026-01 39,860 0 0 0 0 13,940 19\n 2026-02 39,280 0 0 0 0 12,718 18\n 2026-03 36,510 0 0 0 0 11,693 19\n 2026-04 71,720 0 0 0 0 14,218 18\nCOUNTERPARTIES on screen (top by twelve-month volume):\n CP-1 out 48 txns 103,976.00 USD\n CP-2 out 12 txns 60,331.50 USD\nReporting threshold in this jurisdiction: 10,000.00 USD\nSYNTHETIC DATA \u2014 no real customer, account or transaction.\n\nHours spent so far: 0.50. You have 8 replies left."
|
||||
},
|
||||
"turns": [
|
||||
{
|
||||
"reply": "{\"action\":\"lookup\",\"what\":\"prior_alerts\"}",
|
||||
"reasoning": null,
|
||||
"call": {
|
||||
"promptTokens": 1531,
|
||||
"completionTokens": 12,
|
||||
"reasoningTokens": null,
|
||||
"durationMs": 1886,
|
||||
"finishReason": "stop"
|
||||
},
|
||||
"info": {
|
||||
"action": {
|
||||
"action": "lookup",
|
||||
"what": "prior_alerts"
|
||||
},
|
||||
"rejection": null,
|
||||
"observation": "PRIOR ALERTS:\n A-3217 R-WIRE-04 fired 2024-07-08 closed after 7 day(s) by Beatriz Grimaldi\n Closed: destination and amount match the remittance declared at onboarding; within stated income.\n A-4028 R-DORM-05 fired 2024-10-12 closed after 9 day(s) by Mateo Jensen\n Closed: reactivation explained by a documented source of funds; document reviewed and retained.\n A-2622 R-VEL-02 fired 2025-01-17 closed after 5 day(s) by Samir Pereira\n Closed: pass-through matches the settlement terms in the agreement on file; counterparties verified.\n A-1389 R-STR-01 fired 2026-03-06 closed after 3 day(s) by Marta Eskildsen\n Closed: deposits are documented daily takings; amounts vary with trading days; within kyc.expected_monthly_cash.\n\nHours spent so far: 0.95. You have 7 replies left."
|
||||
}
|
||||
},
|
||||
{
|
||||
"reply": "{\"action\":\"close\",\"reason\":\"PREVIOUSLY_REVIEWED\",\"cites\":[\"A-1389\",\"T-213\",\"T-217\",\"T-219\",\"kyc.expected_activity\",\"kyc.expected_monthly_cash\"],\"note\":\"Same rule R-STR-01 was fired on 2026-03-06 (A-1389) and closed by Marta Eskildsen after confirming the deposits were documented daily takings varying with trading days, within expected monthly cash. The current three deposits (T-213, T-217, T-219) follow the identical pattern: cash-intensive pizzeria, amounts just under the 10k threshold consistent with splitting daily takings, all at the same branch, and April's total cash-in of 71,720 is well within the 86,000 expected monthly cash. No new counterparty, no change in activity profile. This is a repeat rule artefact on a known, documented cash-deposit pattern.\"}",
|
||||
"reasoning": null,
|
||||
"call": {
|
||||
"promptTokens": 1827,
|
||||
"completionTokens": 226,
|
||||
"reasoningTokens": null,
|
||||
"durationMs": 8850,
|
||||
"finishReason": "stop"
|
||||
},
|
||||
"info": {
|
||||
"action": {
|
||||
"action": "close",
|
||||
"reason": "PREVIOUSLY_REVIEWED",
|
||||
"cites": [
|
||||
"A-1389",
|
||||
"T-213",
|
||||
"T-217",
|
||||
"T-219",
|
||||
"kyc.expected_activity",
|
||||
"kyc.expected_monthly_cash"
|
||||
],
|
||||
"note": "Same rule R-STR-01 was fired on 2026-03-06 (A-1389) and closed by Marta Eskildsen after confirming the deposits were documented daily takings varying with trading days, within expected monthly cash. The current three deposits (T-213, T-217, T-219) follow the identical pattern: cash-intensive pizzeria, amounts just under the 10k threshold consistent with splitting daily takings, all at the same branch, and April's total cash-in of 71,720 is well within the 86,000 expected monthly cash. No new counterparty, no change in activity profile. This is a repeat rule artefact on a known, documented cash-deposit pattern."
|
||||
},
|
||||
"rejection": null,
|
||||
"observation": "Disposition recorded. The episode is over."
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
Reference in New Issue
Block a user