Runtime lifecycle
This screen explains the knowledge being applied — it is read-mostly. You can submit proposals here; deliberate engineering (authoring Books, Concept ladders, baseline schemas) happens in the IDE.
Activated Books
Concept versions used
Baseline applied
Business-hours authentication baseline · v4
Known users + svc-backup service account, weekdays 07:00–19:00. Deviations above this baseline drive credential-abuse activation.
Vocabulary & field mappings
Known Errors & expected behaviors
No Known Errors matched this session.
Expected behavior: svc-backup logging in hourly is baseline, not a finding.
Knowledge provenance
Bounded actions
Proposals are evidence-linked and target Agent B — never live Agent A. Production editing is disabled in the Demonstration Edition.