Skip to content

Technical docs

Program Overview

What TraceLodger is, who uses it, and how the review model stays local, read-only, and provenance-first.

Product and engine naming

TraceLodger is the public product name on this site. Velsics is the company brand. TraceLedger is the application name used in the source repository and product specs. CSAA is the technical engine label used only where evaluator documentation needs to describe pipeline concepts, schemas, or command-line references.

One-sentence description

TraceLodger is local-first investigation software for reconstructing shadow AI and agentic activity from saved endpoint, browser, mobile, export, and enterprise case artifacts.

Review contract

TraceLodger reads mounted or extracted local evidence, writes a separate generated case directory, and keeps source-native review primary. The product organizes retained artifacts for human review; it does not turn weak or missing evidence into stronger conclusions.

  • Read-only over source evidence.
  • Generated case directory becomes the review system of record.
  • Direct, inferred, missing, unsupported, warning, contradiction, and uncalibrated states stay visible.
  • Browser, mobile, export, and enterprise records add context where retained evidence supports it.
  • Provenance exports package traceability for downstream review.

Primary users

Docs and product pages should speak to DFIR examiners, insider-risk investigators, incident response teams, legal and eDiscovery reviewers, HR review teams, security leaders, forensic lab operators, and administrators deploying controlled desktop software.