Technical docs
Program Overview
What TraceLodger is, who uses it, and how the review model stays local, read-only, and provenance-first.
Product and engine naming
TraceLodger is the public product name on this site. Velsics is the company brand. TraceLedger is the application name used in the source repository and product specs. CSAA is the technical engine label used only where evaluator documentation needs to describe pipeline concepts, schemas, or command-line references.
One-sentence description
TraceLodger is local-first investigation software for reconstructing shadow AI and agentic activity from saved endpoint, browser, mobile, export, and enterprise case artifacts.
Review contract
TraceLodger reads mounted or extracted local evidence, writes a separate generated case directory, and keeps source-native review primary. The product organizes retained artifacts for human review; it does not turn weak or missing evidence into stronger conclusions.
- Read-only over source evidence.
- Generated case directory becomes the review system of record.
- Direct, inferred, missing, unsupported, warning, contradiction, and uncalibrated states stay visible.
- Browser, mobile, export, and enterprise records add context where retained evidence supports it.
- Provenance exports package traceability for downstream review.
Primary users
Docs and product pages should speak to DFIR examiners, insider-risk investigators, incident response teams, legal and eDiscovery reviewers, HR review teams, security leaders, forensic lab operators, and administrators deploying controlled desktop software.