Run OverviewWhole run
Execution scope & sources Whole run
Graph Explorer canonical graph → lens projection → derived edges
Session scope: graph, related events and conversation. Risk, collection status and auxiliary sections cover the whole run. Risk and auxiliary evidence links return to the whole run.
all events
Signals & Risk Whole run
Evidence reader
select a risk, graph node, or overview group to inspect its evidence
| time | event | pid | tool call | correlation | payload |
|---|
Select a graph node or a session record to inspect saved evidence.
Readable view only; hashes and byte positions refer to the saved content.
Agent sessionloading…
Source assertions only. Missing authorization is neither allowed nor denied.
Outbound Data Surfaces Whole run
Run Timeline Whole run
| time | event | source | correlation | conf | detail |
|---|
Process Tree Whole run
Egress Whole run
| time | type | destination | path | port | evidence | count | process |
|---|