Workflows
Review evidence stories without hiding source limits.
TraceLodger organizes retained case artifacts into concrete review paths. Each workflow separates what evidence may show from what it may leave unresolved.
Workflow
Sensitive Material Into AI
Review whether sensitive files, snippets, or excerpts align with saved AI activity while keeping source-native review primary.
DirectInferredWarning
01Source fileDirect
02AI artifactInferred
03Gap reviewWarning
Evidence it may show
- Direct local matches between saved material and reviewed AI artifacts.
- Candidate continuity between document handling and AI-session timing.
- Explicit separation between direct evidence and bounded inference.
Evidence it may not show
- Whether a person intended misuse.
- Whether activity occurred outside retained local artifacts.
Workflow
Agent Activity Evidence
Reconstruct saved agent runs, prompts, local files, and tool-use traces without treating gaps as certainty.
DirectUnsupportedUncalibrated
01Agent runDirect
02Tool traceUnsupported
03Validation gateUncalibrated
Evidence it may show
- Observed agent-session artifacts.
- Review-ready source references for examiner follow-up.
- Validation status for parser-backed activity.
Evidence it may not show
- Agent actions not present in retained logs.
- Claims not calibrated through validation gates.
Workflow
Cross-Device Reconstruction
Connect endpoint, browser, mobile, and export artifacts into a careful timeline that preserves provenance.
DirectInferredContradiction
01EndpointDirect
02BrowserInferred
03MobileContradiction
04ExportDirect
Evidence it may show
- Source-linked activity across retained devices and exports.
- Timeline cues that show direct, inferred, and conflicting states.
- Visible provenance for each review step.
Evidence it may not show
- Missing devices or erased artifacts.
- Continuity claims not supported by retained evidence.
Workflow
Enterprise Enrichment
Add enterprise exports as corroborating context while keeping local evidence and source-native records central.
DirectInferredAbsent
01Local evidenceDirect
02SaaS exportInferred
03CorroborationAbsent
Evidence it may show
- Corroborating identity, access, or SaaS export context.
- Clear separation between local evidence and external context.
- Review-ready references for legal or security stakeholders.
Evidence it may not show
- Events outside available exports.
- Enterprise logs that conflict with local evidence.