Forensic Investigation
Deterministic Forensics
Evidence-backed, deterministic causal analysis. Zero AI hallucination in enforcement explanations
Deterministic Block Root Cause Verdict
Action upload_s3 attempted by agent orchestrator_v2 was rejected.
Evaluation Timestamp: Sat, 19 Sep 2026 10:45:00 GMT • Event ID: evt_pinj_001
4-Point Execution State Verification
Execution Truth Pipeline Blocked at: Deterministic Rule: pol_no_pii_export
INTENDED
YES
REQUESTED
YES
ALLOWED
NO
EXECUTED
NO
Attempted Action
upload_s3
High-risk external egress
Acting Principal
orchestrator_v2
Trust Level: HIGH
Context Origin
UNTRUSTED
Taint Source: External MCP
Target Sink
s3://company-exports/customers.csv
Sensitivity: CRITICAL
Causal Evidence Sequence
1
Context Ingestion from Untrusted SourceTAINT DETECTED
Agent received instruction payload from external untrusted MCP server containing suspected prompt injection pattern.
2
Taint Propagation into Agent StateSTATE TAINTED
Execution runtime marked agent active memory as tainted with HIGH sensitivity level.
3
Egress Tool Invocation RequestSINK REACHED
Agent attempted invocation of upload_s3 to transmit sensitive database records to an external cloud bucket.
4
Deterministic Policy Enforcement InterceptionBLOCKED
Rule "pol_no_pii_export" evaluated true: Tainted agent blocked from invoking egress tools. Request aborted prior to network execution.