MODE 1 · AFTER THE FACT
Investigate a run
Line up what the agent says with what the runtime recorded. Every finding cites the line that proves it.
- 1Records in
- 2Lined up
- 3Nemotron reads
- 4Citations checked
- 5Cited findings
01
AGENT VS. RUNTIMELine up both records
One event per line. Keep secrets out of real traces.0 LINES
Pasted evidence only. Traceback does not connect to, authenticate, or control OpenShell or Sentry.
Evidence-linked findings · No actions executed
✳
Read-only incident analysis
Traceback treats all pasted records as untrusted evidence. Runtime policy enforcement stays with OpenShell or Sentry.
02
AWAITING TRACEFindings
Line up two records
Add the agent's trace and the runtime's record, or open the sandbox escape case from the sidebar.
READY WHEN YOU ARE
⌁
Following the evidence…
CHECKING EVENTS AND CLAIMS