Files
PIG-Demo/public/traces/alert-triage/base-off-s6.json
T
karti-ai 2dfa96939e
ci / web (push) Successful in 2m43s
ci / python (push) Successful in 2m36s
Alert Triage: environment #2, built end to end by the pipeline
The first environment shipped through .claude/workflows/new-environment.js:
specification, three adversarial reviews (all 'fixable', none fatal), the
Python environment, the TypeScript port, captured rollouts, and the demo page.
Eleven agents, no errors.

The proof that the platform scales is one line long. Alert Triage has a
completely different shape from Word Five — JSON actions, priced lookups, an
analyst screen instead of a grid — and the only change under
src/components/demo/ is a comment edit, because the isolation lint refused the
word "wordle" there. Zero shell code changed. 415 contract checks now pass
against two demos, up from 206 against one.

The environment is honest by construction. Every alert is synthetic, generated
from the seed, and the banner saying so sits inside the board surface. Two of
the eleven scenario templates are hidden-suspicious: generated by the same code
as their benign twin with the signal overlaid only in lookup data, so the free
screen is identically distributed and a screen-only policy STRUCTURALLY cannot
tell them apart. The probe ladder measures it: `fast` catches 0.0 of hidden
seeds. That is the counterweight made real rather than asserted.

Twelve policies, thirteen ladder assertions, a genuine three-way trade:

  fast      0.846   wins hours (0.85), misses every hidden case
  targeted  0.894   wins the shipped total
  thorough  0.820   wins evidence (1.00), spends 2.9 hours

None dominates. 92 Python tests, 35 TypeScript tests, 65 fixtures replaying at
delta 0, and conformance gated on world + scorer + protocol so the browser shows
the same alert for ?seed= that Python generated.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019mt6sHQHEnEYrJZvoMCJSB
2026-08-28 19:48:36 -07:00

91 lines
8.0 KiB
JSON

{
"runId": "base-off-s6",
"seed": 6,
"model": "brain-qwen38-dspark",
"capturedAt": "2026-08-28",
"rewards": {
"caught": 1.0,
"hours": 0.55,
"evidence": 0.6666666666666666
},
"metrics": {
"hours_spent": 1.0,
"reference_hours": 0.55,
"lookups": 1.0,
"turns_used": 2.0,
"rejected_replies": 0.0,
"false_escalation": 0.0,
"missed": 0.0,
"typology_match": null
},
"truncated": false,
"outcome": "solved",
"info": {
"label": "benign",
"template": "B1",
"overlay": null,
"typology": null,
"planted": [
[
"kyc.expected_activity",
"kyc.expected_monthly_cash"
],
[
"kyc.expected_monthly_cash"
]
],
"reference_minutes": 33,
"reference_policy": "fast",
"held_out": false,
"tier": "benign",
"screen": "ALERT A-7014 rule R-CASH-03 \u2014 Monthly cash deposits materially above the trailing six-month average\n fired 2026-05-15\n triggering transactions:\n T-83 2026-05-02 cash_in 2,140.00 USD branch BR-102\n T-84 2026-05-03 cash_in 2,930.00 USD branch BR-102\n T-85 2026-05-04 cash_in 2,610.00 USD branch BR-031\n T-86 2026-05-05 cash_in 2,290.00 USD branch BR-031\n T-87 2026-05-06 cash_in 2,930.00 USD branch BR-031\n T-88 2026-05-08 cash_in 2,190.00 USD branch BR-031\n T-89 2026-05-09 cash_in 2,270.00 USD branch BR-031\n T-90 2026-05-10 cash_in 1,970.00 USD branch BR-102\n T-91 2026-05-11 cash_in 2,540.00 USD branch BR-031\n T-92 2026-05-12 cash_in 2,540.00 USD branch BR-031\n T-93 2026-05-13 cash_in 1,970.00 USD branch BR-102\n T-94 2026-05-14 cash_in 2,930.00 USD branch BR-031\nKYC FILE C-3047 Lakeside Landscaping Inc.\n kyc.account_opened = 2013-08-05\n kyc.business_type = landscaping services\n kyc.country = United States\n kyc.customer_type = business\n kyc.expected_activity = Seasonal business; cash receipts peak April to September.\n kyc.expected_monthly_cash = 38,000.00 USD\n kyc.kyc_refreshed = 2025-04-30\n kyc.pep = False\n kyc.prior_alerts = 2\n kyc.prior_sars = 0\n kyc.remittance_declared = none declared\n kyc.stated_income = 266,000.00 USD\nTWELVE-MONTH SUMMARY (USD)\n month cash in cash out wires in wires out ach in ach out txns\n 2025-06 28,130 0 0 2,900 0 7,716 10\n 2025-07 24,190 0 0 0 0 8,652 11\n 2025-08 27,600 0 0 0 0 7,538 10\n 2025-09 22,400 0 0 6,300 0 6,691 13\n 2025-10 5,480 0 0 0 0 1,686 4\n 2025-11 7,530 0 0 0 0 1,673 4\n 2025-12 6,520 0 0 3,900 0 2,119 5\n 2026-01 8,260 0 0 0 0 1,811 5\n 2026-02 5,740 0 0 0 0 1,989 4\n 2026-03 6,100 0 0 3,300 0 2,094 6\n 2026-04 24,540 0 0 0 0 5,537 10\n 2026-05 29,310 0 0 0 0 9,777 13\nCOUNTERPARTIES on screen (top by twelve-month volume):\n CP-1 out 12 txns 57,289.16 USD\n CP-2 out 4 txns 16,400.00 USD\nReporting threshold in this jurisdiction: 10,000.00 USD\nSYNTHETIC DATA \u2014 no real customer, account or transaction.\n\nHours spent so far: 0.50. You have 8 replies left."
},
"turns": [
{
"reply": "Looking at this alert, the key question is whether the May cash deposits are genuinely out of line with the customer's profile.\n\nLet me note the facts I've already been shown:\n- Business: landscaping, seasonal cash peaks April\u2013September (kyc.expected_activity)\n- Expected monthly cash: 38,000 USD (kyc.expected_monthly_cash)\n- May 2026 cash in: 29,310 \u2014 below the stated expectation\n- The rule R-CASH-03 fired because May is \"materially above the trailing six-month average\" \u2014 but the trailing six months (Nov\u2013Apr) include the dead winter season, so a low base mechanically trips the rule at the start of season.\n- April 2026 already showed the seasonal uptick (24,540).\n- No wires in, all outflows to CP-1/CP-2 are ordinary business payables; no PEP, no prior SARs.\n\nThis looks like a rule artefact (seasonal peak vs. low winter base), not structuring. The individual deposits are all well under the 10,000 reporting threshold and there's no rapid movement or funneling pattern.\n\nLet me confirm there's no prior alert that already covered this seasonal pattern, which would strengthen a clean close.\n\n{\"action\":\"lookup\",\"what\":\"prior_alerts\"}",
"reasoning": null,
"call": {
"promptTokens": 1867,
"completionTokens": 295,
"reasoningTokens": null,
"durationMs": 13229,
"finishReason": "stop"
},
"info": {
"action": {
"action": "lookup",
"what": "prior_alerts"
},
"rejection": null,
"observation": "PRIOR ALERTS:\n A-4237 R-CASH-03 fired 2024-08-10 closed after 7 day(s) by Bilal Rasmussen\n Closed: seasonal peak consistent with kyc.expected_activity; volume within stated expectation.\n A-2077 R-WIRE-04 fired 2025-04-23 closed after 3 day(s) by Dana Pereira\n Closed: destination and amount match the remittance declared at onboarding; within stated income.\n\nHours spent so far: 0.95. You have 7 replies left."
}
},
{
"reply": "The prior alert A-4237 is decisive. It is the same rule (R-CASH-03), fired in the same seasonal window (August), and was closed by a prior analyst as \"seasonal peak consistent with kyc.expected_activity; volume within stated expectation.\" This exact pattern has already been reviewed and dispositioned.\n\nThe current May volume (29,310) is below the stated monthly expectation (38,000), the trigger is purely mechanical (seasonal peak vs. low winter base), there are no PEP flags, no prior SARs, and the outflows are ordinary business payables. This is a rule artefact that has been previously reviewed.\n\n{\"action\":\"close\",\"reason\":\"PREVIOUSLY_REVIEWED\",\"cites\":[\"A-4237\",\"kyc.expected_activity\",\"kyc.expected_monthly_cash\",\"T-84\"],\"note\":\"Same rule R-CASH-03, same seasonal window; prior alert A-4237 already closed as seasonal peak consistent with profile. May cash (29,310) is below stated monthly expectation (38,000). Trigger is mechanical (low winter base). No PEP, no prior SARs, outflows are ordinary business payables.\"}",
"reasoning": null,
"call": {
"promptTokens": 2318,
"completionTokens": 269,
"reasoningTokens": null,
"durationMs": 20616,
"finishReason": "stop"
},
"info": {
"action": {
"action": "close",
"reason": "PREVIOUSLY_REVIEWED",
"cites": [
"A-4237",
"kyc.expected_activity",
"kyc.expected_monthly_cash",
"T-84"
],
"note": "Same rule R-CASH-03, same seasonal window; prior alert A-4237 already closed as seasonal peak consistent with profile. May cash (29,310) is below stated monthly expectation (38,000). Trigger is mechanical (low winter base). No PEP, no prior SARs, outflows are ordinary business payables."
},
"rejection": null,
"observation": "Disposition recorded. The episode is over."
}
}
]
}