Investigate

Forensics & Incident Timeline

Chronological reconstruction of MCP transactions, tool execution payloads, policy blocks, and reverse Saga compensations.

Recorded Transactions

Select a transaction to inspect step-level forensic payloads

0
No persisted transactions found in SQLite. Run a simulation in Attack Lab to generate forensic traces.

Incident Context & Step Evidence

Select a transaction from the ledger

No transaction selected.

Reference Saga Rollback Sequence

Standard chronological lifecycle of a multi-step incident and compensation recovery

TRANSACTION_INITIATED14:32:01

Saga transaction tx_2393cf41 started for multi-step agent plan.

TOOL_CALL_ALLOWED14:32:02

Read invoice retrieved successfully under capability scope invoices:*.

NONCE_VERIFIED14:32:03

Single-use nonce checked and committed to SQLite ledger securely.

SAGA_ROLLBACK_INITIATED14:32:04

Downstream failure encountered at step 3. Reverse compensation triggered.

COMPENSATION_COMPLETE14:32:05

Compensating transaction successfully reversed previous ledger state.

Chronological Audit Incident Log

Recent gateway verdicts persisted in audit_events (0 records)

No persisted audit events yet.