Audit Log
11,842 immutable events · WORM-replicated to compliance storage
| When | Actor | Action | Description | Entity |
|---|---|---|---|---|
| 5/29/2026, 2:21:02 AM | Maria Santos supplier | registration started | Started registration via portal | Registration:reg_maria |
| 5/29/2026, 3:21:02 AM | Maria Santos supplier | step completed | Completed Step 1: Entity Type | Registration:reg_maria |
| 5/29/2026, 3:21:02 AM | Maria Santos supplier | document uploaded | Uploaded W-9 (v1) | Document:doc_maria_w9 |
| 5/29/2026, 3:21:02 AM | System system | ai classification | Doc classified as W-9; TIN 62-1789432; legal name "Santos Home Health Services" (no LLC suffix) | Document:doc_maria_w9 |
| 5/29/2026, 3:21:02 AM | Maria Santos supplier | step completed | Completed Step 2: Tax Info | Registration:reg_maria |
| 5/29/2026, 3:21:02 AM | Maria Santos supplier | otp verified | Email OTP verified (after 2 failed attempts) | SupplierUser:usr_sup_mari |
| 5/29/2026, 3:21:02 AM | Maria Santos supplier | step completed | Completed Step 3: Contacts | Registration:reg_maria |
| 5/29/2026, 3:21:02 AM | Maria Santos supplier | registration paused | Saved draft at Step 4 (Banking) | Registration:reg_maria |
| 5/29/2026, 3:21:02 AM | System ai | duplicate check | Duplicate check: near-match found ("Santos Home Healthcare" TN-2025-2118, similarity 0.78) | Registration:reg_maria |
| 5/29/2026, 3:21:02 AM | System ai | risk scored | Risk score: 38 (Yellow). Factors: near-duplicate +12, new EIN +8, verified TN address -10. | Registration:reg_maria |
| 5/29/2026, 3:21:02 AM | Jordan Lee analyst | case picked up | Picked up case for review | Registration:reg_maria |
| 5/29/2026, 4:21:02 AM | Jordan Lee analyst | note added | Note: Need to confirm LLC suffix on W-9 before approval. | Registration:reg_maria |
| 6/17/2026, 7:21:02 PM | Carter Restoration supplier | change request submitted | Submitted banking change request | ChangeRequest:cr_carter |
| 6/17/2026, 7:21:02 PM | System system | ial required | IAL3 required for banking change | ChangeRequest:cr_carter |
| 6/17/2026, 8:21:02 PM | System ai | risk scored | Risk score: 78 (Red). Factors: owner variant +25, recent contact change +22, soft watchlist hit +15, banking change <30d from email change +18. | ChangeRequest:cr_carter |
| 6/17/2026, 8:21:02 PM | System ai | verification run | Bank ownership check returned: account holder "Carter Restoration Services Holdings, LLC" vs supplier "Carter Restoration Services, LLC" | ChangeRequest:cr_carter |
| 6/17/2026, 9:21:02 PM | Jordan Lee analyst | case opened | Opened Carter case for review | ChangeRequest:cr_carter |
| 6/17/2026, 10:21:02 PM | Jordan Lee analyst | pii revealed | Revealed account number (reason: Investigating banking change; auto-remask 60s) | ChangeRequest:cr_carter |
| 6/17/2026, 10:21:02 PM | Jordan Lee analyst | defer to supervisor | Deferred to Supervisor with note about owner variant + contact change + soft watchlist | ChangeRequest:cr_carter |
| 6/18/2026, 4:21:02 AM | Derrick Moore supervisor | case opened | Reviewed Jordan's note and evidence bundle | ChangeRequest:cr_carter |
| 6/18/2026, 5:21:02 AM | Derrick Moore supervisor | escalated to investigator | Escalated to Investigator (Aisha Khan) — suspected fraud pattern | ChangeRequest:cr_carter |
| 6/18/2026, 6:21:02 AM | Aisha Khan investigator | investigation opened | Opened cluster investigation: 3 suppliers, shared bank account | FraudCluster:frd_carter_r |
| 6/18/2026, 6:21:02 AM | Aisha Khan investigator | evidence attached | Attached cr_carter, cr_bluegrass, doc_carter_sdda, network-graph snapshot | FraudCluster:frd_carter_r |
| 6/18/2026, 7:21:02 AM | Aisha Khan investigator | disposition set | Disposition: Confirmed Fraud. $487K estimated at risk. All 3 banking changes blocked. | FraudCluster:frd_carter_r |
| 6/18/2026, 7:21:02 AM | System system | notification sent | Notified supplier + Comptroller's office of fraud block | ChangeRequest:cr_carter |
| 6/18/2026, 7:21:02 AM | Aisha Khan investigator | pack generated | Generated Investigation Pack PDF with 4 signatures | FraudCluster:frd_carter_r |
| 6/19/2026, 12:21:02 AM | Hamilton Building Supply supplier | chat started | Started web chat | Ticket:tkt_hamilton |
| 6/19/2026, 12:21:02 AM | AI Attendant ai | intent matched | Matched intent: registration_flag_inquiry (confidence 0.42) | Ticket:tkt_hamilton |
| 6/19/2026, 12:21:02 AM | AI Attendant ai | response sent | Sent AI response | Ticket:tkt_hamilton |
| 6/19/2026, 12:21:02 AM | AI Attendant ai | handoff triggered | Confidence dropped below threshold (0.38 < 0.65); handed off to Help Desk | Ticket:tkt_hamilton |
| 6/19/2026, 12:21:02 AM | System system | ticket routed | Routed to Help Desk Tier 1 queue | Ticket:tkt_hamilton |
| 6/19/2026, 12:21:02 AM | System system | suggested response drafted | AI suggested response drafted for human review | Ticket:tkt_hamilton |
| 3/1/2026, 2:21:02 AM | TN Valley Property supplier | registration submitted | Submitted registration | Registration:reg_tn_valle |
| 3/1/2026, 3:21:02 AM | System ai | risk scored | Risk score: 92 (Red) | Registration:reg_tn_valle |
| 3/11/2026, 2:21:02 AM | Jordan Lee analyst | rmi sent | RMI sent: Bank account not owned | Registration:reg_tn_valle |
| 3/26/2026, 2:21:02 AM | Jordan Lee analyst | rmi sent | RMI sent: Address inconsistency | Registration:reg_tn_valle |
| 4/20/2026, 2:21:02 AM | Aisha Khan investigator | escalation received | Escalated to investigator | Registration:reg_tn_valle |
| 5/28/2026, 2:21:02 AM | Aisha Khan investigator | cluster linked | Linked to Carter Restoration banking ring | FraudCluster:frd_carter_r |
| 5/31/2026, 2:21:02 AM | Aisha Khan investigator | disposition set | Disposition: Denied (Confirmed Fraud) | Registration:reg_tn_valle |
| 5/31/2026, 2:21:02 AM | System system | supplier status change | Status changed to Rejected | Supplier:sup_tn_valle |
| 5/31/2026, 2:21:02 AM | System system | notification sent | Denial notification sent to supplier | Supplier:sup_tn_valle |
| 6/19/2026, 1:21:02 AM | Evelyn Brooks auditor | public records collected | Added TN Valley case + 4 tickets + audit log + AI decisions + fraud cluster disposition to collection | PublicRecordsRequest:pr_2026_0034 |
| 4/29/2026, 10:21:02 AM | System system | kpi drill | kpi drill executed | ChangeRequest:sup_0500 |
| 6/13/2026, 9:21:02 AM | Marcus Holloway analyst | kpi drill | kpi drill executed | Registration:sup_0501 |
| 2/25/2026, 10:21:02 PM | Jordan Lee analyst | assignment change | assignment change executed | Verification:sup_0502 |
| 2/23/2026, 1:21:02 PM | Pat Edwards helpdesk | verification run | verification run executed | Ticket:sup_0503 |
| 5/26/2026, 12:21:02 AM | System system | page view | page view executed | ChangeRequest:sup_0504 |
| 3/26/2026, 2:21:02 PM | System system | ai response sent | ai response sent executed | Document:sup_0505 |
| 5/2/2026, 1:21:02 AM | Marcus Holloway analyst | sms sent | sms sent executed | Verification:sup_0506 |
| 5/17/2026, 3:21:02 AM | Pat Edwards helpdesk | kpi drill | kpi drill executed | Ticket:sup_0507 |
| 5/31/2026, 7:21:02 PM | System system | ai response sent | ai response sent executed | Registration:sup_0508 |
| 3/2/2026, 12:21:02 PM | Jordan Lee analyst | assignment change | assignment change executed | Document:sup_0509 |
| 4/14/2026, 9:21:02 PM | Aisha Khan investigator | page view | page view executed | Ticket:sup_0510 |
| 3/7/2026, 1:21:02 AM | Marcus Holloway analyst | sms sent | sms sent executed | Ticket:sup_0511 |
| 3/8/2026, 11:21:02 PM | Marcus Holloway analyst | verification run | verification run executed | Ticket:sup_0512 |
| 3/20/2026, 9:21:02 AM | Aisha Khan investigator | intent matched | intent matched executed | Supplier:sup_0513 |
| 3/24/2026, 5:21:02 PM | Aisha Khan investigator | ai response sent | ai response sent executed | Registration:sup_0514 |
| 2/14/2026, 9:21:02 AM | Marcus Holloway analyst | login | login executed | ChangeRequest:sup_0515 |
| 5/31/2026, 12:21:02 AM | Evelyn Brooks auditor | login | login executed | Supplier:sup_0516 |
| 2/26/2026, 6:21:02 PM | Evelyn Brooks auditor | email sent | email sent executed | Supplier:sup_0517 |
| 2/12/2026, 1:21:02 PM | System system | verification run | verification run executed | Verification:sup_0518 |
| 2/14/2026, 1:21:02 PM | Evelyn Brooks auditor | intent matched | intent matched executed | Supplier:sup_0519 |
| 5/24/2026, 4:21:02 AM | Aisha Khan investigator | login | login executed | Supplier:sup_0520 |
| 3/3/2026, 1:21:02 AM | AI Attendant ai | document viewed | document viewed executed | Registration:sup_0521 |
| 4/25/2026, 5:21:02 AM | Jennifer Park analyst | document viewed | document viewed executed | ChangeRequest:sup_0522 |
| 2/10/2026, 9:21:02 PM | Jordan Lee analyst | email sent | email sent executed | Ticket:sup_0523 |
| 3/9/2026, 1:21:02 AM | Pat Edwards helpdesk | email sent | email sent executed | Verification:sup_0524 |
| 5/27/2026, 7:21:02 PM | Jennifer Park analyst | sms sent | sms sent executed | Verification:sup_0525 |
| 2/20/2026, 9:21:02 AM | Jordan Lee analyst | pdf exported | pdf exported executed | Document:sup_0526 |
| 3/26/2026, 8:21:02 AM | AI Attendant ai | pdf exported | pdf exported executed | ChangeRequest:sup_0527 |
| 5/15/2026, 6:21:02 AM | Jordan Lee analyst | email sent | email sent executed | Ticket:sup_0528 |
| 5/7/2026, 11:21:02 AM | Derrick Moore supervisor | intent matched | intent matched executed | Supplier:sup_0529 |
| 6/12/2026, 6:21:02 AM | AI Attendant ai | sms sent | sms sent executed | Verification:sup_0530 |
| 5/16/2026, 2:21:02 AM | Jennifer Park analyst | kpi drill | kpi drill executed | Document:sup_0531 |
| 5/18/2026, 12:21:02 PM | Jordan Lee analyst | comment added | comment added executed | Verification:sup_0532 |
| 3/18/2026, 1:21:02 PM | Derrick Moore supervisor | comment added | comment added executed | Registration:sup_0533 |
| 6/1/2026, 7:21:02 PM | System system | assignment change | assignment change executed | Verification:sup_0534 |
| 4/7/2026, 10:21:02 AM | Evelyn Brooks auditor | sms sent | sms sent executed | Document:sup_0535 |
| 2/25/2026, 9:21:02 AM | Evelyn Brooks auditor | sms sent | sms sent executed | Verification:sup_0536 |
| 3/3/2026, 5:21:02 AM | Derrick Moore supervisor | status change | status change executed | ChangeRequest:sup_0537 |
| 5/22/2026, 10:21:02 PM | AI Attendant ai | comment added | comment added executed | Document:sup_0538 |
| 4/10/2026, 11:21:02 AM | Pat Edwards helpdesk | sms sent | sms sent executed | ChangeRequest:sup_0539 |
| 5/22/2026, 3:21:02 AM | Pat Edwards helpdesk | assignment change | assignment change executed | Ticket:sup_0540 |
| 5/3/2026, 11:21:02 AM | Marcus Holloway analyst | login | login executed | ChangeRequest:sup_0541 |
| 5/2/2026, 7:21:02 AM | System system | kpi drill | kpi drill executed | Verification:sup_0542 |
| 3/9/2026, 9:21:02 PM | Derrick Moore supervisor | sms sent | sms sent executed | Registration:sup_0543 |
| 2/21/2026, 12:21:02 PM | System system | verification run | verification run executed | Supplier:sup_0544 |
| 5/6/2026, 10:21:02 AM | Jordan Lee analyst | email sent | email sent executed | Supplier:sup_0545 |
| 3/3/2026, 3:21:02 AM | Jordan Lee analyst | page view | page view executed | Ticket:sup_0546 |
| 3/2/2026, 8:21:02 PM | Pat Edwards helpdesk | ai response sent | ai response sent executed | ChangeRequest:sup_0547 |
| 3/2/2026, 9:21:02 PM | Jordan Lee analyst | email sent | email sent executed | Registration:sup_0548 |
| 3/2/2026, 10:21:02 PM | AI Attendant ai | document viewed | document viewed executed | ChangeRequest:sup_0549 |
| 6/17/2026, 3:21:02 PM | Aisha Khan investigator | comment added | comment added executed | Ticket:sup_0550 |
| 4/9/2026, 8:21:02 PM | System system | comment added | comment added executed | Document:sup_0551 |
| 5/22/2026, 8:21:02 AM | Derrick Moore supervisor | login | login executed | Verification:sup_0552 |
| 3/23/2026, 4:21:02 AM | Jennifer Park analyst | report generated | report generated executed | ChangeRequest:sup_0553 |
| 4/6/2026, 3:21:02 PM | Pat Edwards helpdesk | verification run | verification run executed | Verification:sup_0554 |
| 2/27/2026, 2:21:02 AM | Aisha Khan investigator | report generated | report generated executed | Document:sup_0555 |
| 5/25/2026, 6:21:02 PM | System system | status change | status change executed | ChangeRequest:sup_0556 |
| 6/18/2026, 7:21:02 AM | Evelyn Brooks auditor | pdf exported | pdf exported executed | Registration:sup_0557 |