Technical docs
Workflows
Core investigation workflows and the evidence questions each one supports.
Sensitive Material Review
TraceLodger can connect a local source document or code fragment to retained AI interactions while preserving match basis, source fingerprint, provenance, and unsupported upload gaps.
- Use for questions about whether known source material appears near retained prompts, responses, exports, browser activity, or agent activity.
- Good states to show: Direct source match, Inferred browser continuity, Unsupported upload evidence, Warning retention gaps.
- Do not describe browser share-style activity as content transmission unless retained evidence directly supports that claim.
Agent Activity Review
TraceLodger turns retained agent-session records into reviewable sessions, tool actions, produced artifacts, browser continuity links, and permission-context states.
- Use for Claude local-agent logs, agent audit JSONL, produced screenshots, and browser continuity records where supported.
- Show permission context as direct, absent, or unsupported. Do not invent approvals.
- Produced artifacts should remain linked to source records and generated case artifacts.
Mac plus iPhone AI Activity
TraceLodger can place desktop AI activity beside mobile app-focus events, location-adjacent signals, notifications, and corroboration packs when retained evidence supports the link.
- Mobile evidence is usually additive corroboration, not a replacement for endpoint artifacts.
- Use bounded terms such as aligned with, near the review window, or adds context.
- Do not turn mobile continuity into intent language.
Investigation Review and Enterprise Enrichment
TraceLodger can add account exports, compliance exports, enterprise metadata, manual alerts, review signoffs, package manifests, and role-specific report views around the endpoint-first case.
- Enterprise evidence should be framed as additive context unless source records support a stronger state.
- Review signoffs record human decisions; they do not replace legal, HR, or examiner judgment.
- Delivery packages should preserve warnings, gaps, and source-native references.