Skip to main content
← Back to enterprise readiness

Incident reconstruction demo

The incident demo is a simulated failed-action trace. It shows the minimum information required to reconstruct an execution decision under audit conditions.

Trace path

request → policy → decision → outcome

What the trace contains

  • • request identifier, workspace, action, and actor
  • • policy identifier, control owner, and required approval
  • • deny decision, reason, and fail-closed outcome
  • • reconstruction paths for telemetry, execution records, and audit chain

Evidence file

public/enterprise-readiness/incident-demo/failed-action-trace.json