Historical synthetic snapshot
Decision Intelligence demo
Explore the real workspace components with fictional evidence. No account, customer records or scan requests.
At this point in the timeline, the newest completed scan has complete coverage. The absent credential is no longer detected; this does not claim an engine-verified fix.
Read the technical guidedemo-orders
CompletedJul 21, 2026, 09:00 AM · 60.0s · whitebox mode
Release decision
3 findings meet the configured fail-on threshold, so this release is blocked.
- Coverage
- Required coverage complete
- Policy
- 2.0.0
- Fails on
- HIGH and above
- Engine
- 3.7.0
- Scanned
- Jul 21, 2026, 09:00 AM
- Decided
- Jul 21, 2026, 09:01 AM(2 days ago)
- A newer scan of this target recorded a decision on Jul 23, 2026, 09:00 AM. This one stays as recorded; it is no longer the target's latest.
- A newer scan of this target is running.
Blocking findings
Next steps
A release decision is a recommendation, not an approval. Your team stays accountable for the release.
Recommended next actions
Ordered by priority. Priority orders the work; it never changes the release decision.
Verification reads the newest later completed scan of this target, from Jul 23, 2026, 09:00 AM:BLOCKOpen that scan
A newer scan is still running; it is not read as evidence until it completes.
2 active actions; 1 closed.
- P1: act firstState: Still detectedEvidence: Confirmed shared remediation point
Upgrade demo-package in requirements.txt (installed: 1.0.0)
Linked findings
Steps
- Review each advisoryAdvisories: DEMO-ADVISORY-1, DEMO-ADVISORY-2
- Check whether one version contains the fix for every listed advisory
- Update the lockfile and run the tests
Rank 1 of 3. Priority orders the work and never changes the release decision.
- Blocking findingsCount: 2
- Highest severitySeverity: CRITICAL
- Best confidence bandConfidence band: HIGH
- The release decision is BLOCK
The engine's fix text at scan time
Review each illustrative advisory before choosing an upgrade; no combined fixed version is asserted.
As listed when the scan ran on Jul 21, 2026, 09:00 AM.
For: DEMO-1
Review each illustrative advisory before choosing an upgrade; no combined fixed version is asserted.
As listed when the scan ran on Jul 21, 2026, 09:00 AM.
For: DEMO-2
How to validate the change
- Re-run the scan with the same settingsMode: whitebox
Analyzers: pip
Verification, finding by finding
Illustrative package advisory A
Later scan: Still detectedNo tracked issue
Illustrative package advisory B
Later scan: Still detectedNo tracked issue
- P2: nextState: Still detectedEvidence: Potential relationship
Investigate the related findings in app/orders.py
Linked findings
Steps
- Inspect the related findings togetherFile: app/orders.py
- Fix each finding on its own unless one change is shown to address several
Rank 2 of 3. Priority orders the work and never changes the release decision.
- Warning findingsCount: 2
- Highest severitySeverity: HIGH
- Best confidence bandConfidence band: MEDIUM
The engine's fix text at scan time
Review the illustrated evidence, apply the appropriate change, then re-scan with the same scope.
As listed when the scan ran on Jul 21, 2026, 09:00 AM.
For: DEMO-3
Review the illustrated evidence, apply the appropriate change, then re-scan with the same scope.
As listed when the scan ran on Jul 21, 2026, 09:00 AM.
For: DEMO-4
How to validate the change
- Re-run the scan with the same settingsMode: whitebox
What is uncertain
- Separate operations in one function
Analyzers: semgrep
Verification, finding by finding
Unsafe query in export
Later scan: Still detectedNo tracked issue
Unsafe command in export
Later scan: Still detectedNo tracked issue
- P1: act firstState: No longer detectedEvidence: One finding
Remove and rotate the credential in config/credentials.py
Linked finding
Steps
- Remove the credential from the source codeFile: config/credentials.py
- Rotate the credential
- Review the repository history for the credential
Rank 3 of 3. Priority orders the work and never changes the release decision.
- Blocking findingsCount: 1
- Highest severitySeverity: CRITICAL
- Best confidence bandConfidence band: HIGH
- The release decision is BLOCK
The engine's fix text at scan time
Review the illustrated evidence, apply the appropriate change, then re-scan with the same scope.
As listed when the scan ran on Jul 21, 2026, 09:00 AM.
For: DEMO-5
How to validate the change
- Re-run the scan with the same settingsMode: whitebox
Analyzers: secrets, textscan
Verification, finding by finding
Credential in source
Later scan: No longer detectedNo tracked issue
Recommendations are deterministic and never change the release decision; nothing is changed in your code.
Coverage
5 findings
Each finding has its own decision. The release decision above is made once, for the whole scan.
- Confirmed shared remediation points
- 1 confirmed shared remediation point (2 findings)
- Potentially related groups
- 1 potentially related group (2 findings)
- Independent findings
- 1 independent finding
Confirmed shared remediation points
Direct evidence of a shared remediation point: the same package declaration, or the same operation on one line. It shows where one change would touch every finding in the group; it does not prove they share a cause, and only a later scan shows which findings a change removed. Check each group's limitations.
Potentially related
Proximity only: the evidence does not show that one change addresses them. Confirm before treating them as one fix.
What the evidence does not establish
- Separate operations in one function
Independent finding
No defensible relationship to another finding; each stands on its own.
DEMO-5CRITICALFinding decision: BLOCKWhite-boxCredential in source
Finding decisionBLOCKConfidence-gated policy
Confidence: HIGH
Evidence
Synthetic evidence for product education; no customer record or credential.
Remediation
Review the illustrated evidence, apply the appropriate change, then re-scan with the same scope.