Skip to content

Synthetic demo · No customer connectors attached · Fixture snapshot 24 Sep 2026, 06:15 UTC

Finding

Blind interval: EU prompt-log collector silent for 3h11m

collector-eu-03 stopped sending heartbeats between 16:29 and 19:40 UTC on 22 Sep. Prompt and output activity during that window has no boundary receipts. The absence of alerts in that window is not evidence of safe operation.

Observed at 24 Sep 2026, 06:15 UTCfnd-2304R41 — missing telemetry read as no incidentsdetected 22 Sep 2026, 19:40 UTClast observed 24 Sep 2026, 06:10 UTC

Summary

Severity
medium
Status
open
Evidence freshness
Pass
Remediation
No remediation planned

Potential access

Paths that could reach the data. These are capability, not proof of disclosure.

  • All production support traffic during the 3h11m window

Observed disclosure

Only what collection actually recorded leaving the boundary.

No disclosure observed

Nothing was recorded leaving the boundary for this finding within the collection window.

Absence of an observation is not proof that nothing left. Check the collection lag for the connectors covering this surface.

Affected records

Actors

  • uc-support-copilot

Continue the investigation

The sample code-to-cloud path is a separate synthetic scenario; a link here does not establish that it caused this finding.

Inspect bounded code-to-cloud evidence →Review collection gaps →Inspect evidence register →

Mitigations in place

A mitigation reduces exposure; it does not close the finding until verification passes.

Scroll table sideways for more columns →

MitigationStatusNote
Collector restarted with supervisionPassHeartbeat restored 19:41 UTC.
Backfill from provider-side logsFailProvider retains 24h only; the window had already expired.
Window marked as uninspected on all affected controlsPassA10 and A11 show the interval.

Evidence

  • Heartbeat gap record

    ev-hb-12 · log · producer collector-registry · collected 22 Sep 2026, 19:41 UTC (35 h ago)

    SignedValid to 22 Dec 2026, 00:00 UTC