{"event": {"actor_name": "operations-lead", "actor_type": "human", "case_id": "CASE-AI-OPS-001", "decision": "none", "event_id": "evt-0001", "event_type": "task_start", "evidence_ref": "evt-0001", "human_approval_required": false, "metadata": {"business_process": "release_exception_review", "lane": "uipath"}, "phase": "intake", "risk_level": "none", "session_id": "session-ai-ops-release-risk", "status": "info", "summary": "Human opened an AI-agent operations case after a release bot proposed a production change.", "task_id": "release-risk-review", "timestamp": "2026-05-19T12:00:41Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:00:41Z"}
{"event": {"actor_name": "codex-ops-agent", "actor_type": "ai_agent", "case_id": "CASE-AI-OPS-001", "decision": "none", "event_id": "evt-0002", "event_type": "plan_update", "evidence_ref": "evt-0002", "human_approval_required": false, "metadata": {"approval_gates": 2, "plan_steps": 5}, "phase": "planning", "risk_level": "low", "session_id": "session-ai-ops-release-risk", "status": "success", "summary": "Agent created a read-only investigation plan with explicit approval gates before any production action.", "task_id": "release-risk-review", "timestamp": "2026-05-19T12:01:22Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:01:22Z"}
{"event": {"action": "collect_release_context", "actor_name": "uipath-evidence-robot", "actor_type": "robot", "case_id": "CASE-AI-OPS-001", "decision": "none", "duration_ms": 4800, "event_id": "evt-0003", "event_type": "robot_task", "evidence_ref": "evt-0003", "human_approval_required": false, "metadata": {"records_collected": 4}, "phase": "evidence_collection", "risk_level": "low", "session_id": "session-ai-ops-release-risk", "status": "success", "summary": "Robot gathered the change ticket, linked pull request, deployment window, and service owner.", "target": "change-ticket-7841", "task_id": "release-risk-review", "timestamp": "2026-05-19T12:02:03Z", "tool": "UiPath Robot"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:02:03Z"}
{"event": {"action": "read_pull_request", "actor_name": "github-api", "actor_type": "api", "case_id": "CASE-AI-OPS-001", "cost_usd_estimate": 0, "decision": "none", "duration_ms": 970, "event_id": "evt-0004", "event_type": "api_call", "evidence_ref": "evt-0004", "human_approval_required": false, "metadata": {"approvals": 1, "files_changed": 8}, "phase": "evidence_collection", "risk_level": "low", "session_id": "session-ai-ops-release-risk", "status": "success", "summary": "API confirmed the pull request touches payment retry behavior and has one approving review.", "target": "payments-service/pull/221", "task_id": "release-risk-review", "timestamp": "2026-05-19T12:02:44Z", "tool": "GitHub API"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:02:44Z"}
{"event": {"action": "run_tests", "actor_name": "codex-ops-agent", "actor_type": "ai_agent", "case_id": "CASE-AI-OPS-001", "cost_usd_estimate": 0.006, "decision": "none", "duration_ms": 53200, "event_id": "evt-0005", "event_type": "tool_call", "evidence_ref": "evt-0005", "human_approval_required": false, "phase": "investigation", "risk_level": "medium", "risk_reason": "Regression test failed around duplicate retry suppression.", "session_id": "session-ai-ops-release-risk", "status": "failed", "summary": "Agent found a failing retry regression test that was not mentioned in the change ticket.", "target": "payments-service retry tests", "task_id": "release-risk-review", "timestamp": "2026-05-19T12:03:25Z", "tool": "shell"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:03:25Z"}
{"event": {"actor_name": "codex-ops-agent", "actor_type": "ai_agent", "case_id": "CASE-AI-OPS-001", "decision": "none", "event_id": "evt-0006", "event_type": "risk_signal", "evidence_ref": "evt-0006", "human_approval_required": false, "metadata": {"risk_rule": "payment_change_failed_test"}, "phase": "risk_review", "risk_level": "high", "risk_reason": "Production payment behavior change plus failing regression test.", "session_id": "session-ai-ops-release-risk", "status": "warning", "summary": "Case risk escalated because the proposed release affects payments and has failing verification.", "task_id": "release-risk-review", "timestamp": "2026-05-19T12:04:06Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:04:06Z"}
{"event": {"action": "deploy", "actor_name": "codex-ops-agent", "actor_type": "ai_agent", "case_id": "CASE-AI-OPS-001", "decision": "blocked_by_policy", "duration_ms": 120, "event_id": "evt-0007", "event_type": "tool_call", "evidence_ref": "evt-0007", "human_approval_required": true, "metadata": {"command_class": "production_deploy"}, "phase": "execution", "risk_level": "critical", "risk_reason": "Production deployment is destructive and requires human approval.", "session_id": "session-ai-ops-release-risk", "status": "blocked", "summary": "Attempted production deployment was blocked by policy before execution.", "target": "production/payments-service", "task_id": "release-risk-review", "timestamp": "2026-05-19T12:04:47Z", "tool": "shell"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:04:47Z"}
{"event": {"actor_name": "operations-lead", "actor_type": "human", "case_id": "CASE-AI-OPS-001", "decision": "needs_more_evidence", "event_id": "evt-0008", "event_type": "approval_gate", "evidence_ref": "evt-0008", "human_approval_required": true, "metadata": {"requested": "service_owner_signoff"}, "phase": "approval", "risk_level": "medium", "session_id": "session-ai-ops-release-risk", "status": "success", "summary": "Human requested more evidence instead of approving the production deployment.", "task_id": "release-risk-review", "timestamp": "2026-05-19T12:05:28Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:05:28Z"}
{"event": {"action": "request_owner_signoff", "actor_name": "uipath-evidence-robot", "actor_type": "robot", "case_id": "CASE-AI-OPS-001", "decision": "none", "duration_ms": 8200, "event_id": "evt-0009", "event_type": "robot_task", "evidence_ref": "evt-0009", "human_approval_required": false, "metadata": {"notification_channel": "case_queue"}, "phase": "evidence_collection", "risk_level": "low", "session_id": "session-ai-ops-release-risk", "status": "success", "summary": "Robot requested service-owner signoff and attached the failed test evidence.", "target": "payments-service owner", "task_id": "release-risk-review", "timestamp": "2026-05-19T12:06:09Z", "tool": "UiPath Robot"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:06:09Z"}
{"event": {"actor_name": "service-owner", "actor_type": "human", "case_id": "CASE-AI-OPS-001", "decision": "rejected", "event_id": "evt-0010", "event_type": "approval_gate", "evidence_ref": "evt-0010", "human_approval_required": true, "metadata": {"release_decision": "hold"}, "phase": "approval", "risk_level": "low", "session_id": "session-ai-ops-release-risk", "status": "success", "summary": "Service owner rejected the release until the retry regression is fixed.", "task_id": "release-risk-review", "timestamp": "2026-05-19T12:06:50Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:06:50Z"}
{"event": {"actor_name": "agentops-recorder", "actor_type": "system", "case_id": "CASE-AI-OPS-001", "decision": "none", "event_id": "evt-0011", "event_type": "handoff_report", "evidence_ref": "evt-0011", "human_approval_required": false, "metadata": {"cited_events": "evt-0003,evt-0004,evt-0005,evt-0006,evt-0007,evt-0010"}, "phase": "handoff", "risk_level": "none", "session_id": "session-ai-ops-release-risk", "status": "success", "summary": "Generated a case handoff report with cited evidence IDs and final rejection decision.", "task_id": "release-risk-review", "timestamp": "2026-05-19T12:07:31Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:07:31Z"}
{"event": {"actor_name": "security-analyst", "actor_type": "human", "case_id": "CASE-DFIR-002", "decision": "none", "event_id": "evt-0012", "event_type": "task_start", "evidence_ref": "evt-0012", "human_approval_required": false, "metadata": {"lane": "findevil", "source": "user_reported_email"}, "phase": "intake", "risk_level": "none", "session_id": "session-dfir-phishing-response", "status": "info", "summary": "Security analyst opened a suspicious email investigation with attached endpoint telemetry.", "task_id": "phishing-triage", "timestamp": "2026-05-19T12:08:12Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:08:12Z"}
{"event": {"actor_name": "dfir-analysis-agent", "actor_type": "ai_agent", "case_id": "CASE-DFIR-002", "decision": "none", "event_id": "evt-0013", "event_type": "plan_update", "evidence_ref": "evt-0013", "human_approval_required": false, "metadata": {"hypotheses": 3}, "phase": "planning", "risk_level": "low", "session_id": "session-dfir-phishing-response", "status": "success", "summary": "Agent proposed an evidence-first DFIR plan: preserve artifacts, list hypotheses, then verify each claim.", "task_id": "phishing-triage", "timestamp": "2026-05-19T12:08:53Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:08:53Z"}
{"event": {"action": "capture_artifacts", "actor_name": "sift-collector", "actor_type": "robot", "case_id": "CASE-DFIR-002", "decision": "none", "duration_ms": 12300, "event_id": "evt-0014", "event_type": "evidence_captured", "evidence_ref": "evt-0014", "human_approval_required": false, "metadata": {"artifacts": "headers,hash,timeline,processes"}, "phase": "evidence_collection", "risk_level": "low", "session_id": "session-dfir-phishing-response", "status": "success", "summary": "Collected email headers, attachment hash, browser download timeline, and endpoint process list.", "target": "mailbox and endpoint timeline", "task_id": "phishing-triage", "timestamp": "2026-05-19T12:09:34Z", "tool": "SIFT workstation"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:09:34Z"}
{"event": {"action": "classify_evidence", "actor_name": "dfir-analysis-agent", "actor_type": "ai_agent", "case_id": "CASE-DFIR-002", "cost_usd_estimate": 0.012, "decision": "none", "duration_ms": 2210, "event_id": "evt-0015", "event_type": "ai_call", "evidence_ref": "evt-0015", "human_approval_required": false, "phase": "investigation", "risk_level": "medium", "risk_reason": "Initial model answer overclaimed malware execution before process evidence was present.", "session_id": "session-dfir-phishing-response", "status": "warning", "summary": "Agent generated an initial hypothesis but flagged one claim as unsupported by current evidence.", "target": "artifact packet", "task_id": "phishing-triage", "timestamp": "2026-05-19T12:10:15Z", "tool": "LLM"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:10:15Z"}
{"event": {"actor_name": "dfir-analysis-agent", "actor_type": "ai_agent", "case_id": "CASE-DFIR-002", "decision": "none", "event_id": "evt-0016", "event_type": "risk_signal", "evidence_ref": "evt-0016", "human_approval_required": false, "metadata": {"self_correction": true}, "phase": "risk_review", "risk_level": "high", "risk_reason": "Unsupported certainty detected in analyst draft.", "session_id": "session-dfir-phishing-response", "status": "warning", "summary": "System marked the draft finding as provisional because execution evidence was missing.", "task_id": "phishing-triage", "timestamp": "2026-05-19T12:10:56Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:10:56Z"}
{"event": {"action": "lookup_hash", "actor_name": "threat-intel-api", "actor_type": "api", "case_id": "CASE-DFIR-002", "decision": "none", "duration_ms": 780, "event_id": "evt-0017", "event_type": "api_call", "evidence_ref": "evt-0017", "human_approval_required": false, "metadata": {"confidence": "low"}, "phase": "evidence_collection", "redaction_applied": true, "risk_level": "medium", "session_id": "session-dfir-phishing-response", "status": "success", "summary": "Hash lookup returned low-confidence phishing kit association; raw indicator was redacted in report output.", "target": "sha256:9f2c-redacted", "task_id": "phishing-triage", "timestamp": "2026-05-19T12:11:37Z", "tool": "Threat Intel API"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:11:37Z"}
{"event": {"actor_name": "security-analyst", "actor_type": "human", "case_id": "CASE-DFIR-002", "decision": "approved", "event_id": "evt-0018", "event_type": "approval_gate", "evidence_ref": "evt-0018", "human_approval_required": true, "metadata": {"containment": "mailbox_only"}, "phase": "approval", "risk_level": "low", "session_id": "session-dfir-phishing-response", "status": "success", "summary": "Human approved containment of the reported message and requested no endpoint isolation.", "task_id": "phishing-triage", "timestamp": "2026-05-19T12:12:18Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:12:18Z"}
{"event": {"actor_name": "agentops-recorder", "actor_type": "system", "case_id": "CASE-DFIR-002", "decision": "none", "event_id": "evt-0019", "event_type": "handoff_report", "evidence_ref": "evt-0019", "human_approval_required": false, "metadata": {"report_type": "dfir"}, "phase": "handoff", "risk_level": "none", "session_id": "session-dfir-phishing-response", "status": "success", "summary": "Generated DFIR report with evidence IDs, unsupported claims, and human containment decision.", "task_id": "phishing-triage", "timestamp": "2026-05-19T12:12:59Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:12:59Z"}
{"event": {"actor_name": "support-manager", "actor_type": "human", "case_id": "CASE-CLOUD-003", "decision": "none", "event_id": "evt-0020", "event_type": "task_start", "evidence_ref": "evt-0020", "human_approval_required": false, "metadata": {"lane": "google,microsoft", "target_user": "support_manager"}, "phase": "intake", "risk_level": "none", "session_id": "session-cloud-agent-workflow", "status": "info", "summary": "Support manager requested an agent that answers customer questions and escalates uncertain cases.", "task_id": "customer-support-knowledge-agent", "timestamp": "2026-05-19T12:13:40Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:13:40Z"}
{"event": {"actor_name": "gemini-ops-navigator", "actor_type": "ai_agent", "case_id": "CASE-CLOUD-003", "decision": "none", "event_id": "evt-0021", "event_type": "plan_update", "evidence_ref": "evt-0021", "human_approval_required": false, "metadata": {"guardrails": 4, "mcp_tools": 3}, "phase": "planning", "risk_level": "low", "session_id": "session-cloud-agent-workflow", "status": "success", "summary": "Agent created a workflow plan using retrieval, MCP tools, cost guardrails, and human escalation.", "task_id": "customer-support-knowledge-agent", "timestamp": "2026-05-19T12:14:21Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:14:21Z"}
{"event": {"action": "retrieve_policy", "actor_name": "knowledge-base-mcp", "actor_type": "api", "case_id": "CASE-CLOUD-003", "cost_usd_estimate": 0.001, "decision": "none", "duration_ms": 440, "event_id": "evt-0022", "event_type": "api_call", "evidence_ref": "evt-0022", "human_approval_required": false, "phase": "evidence_collection", "risk_level": "low", "session_id": "session-cloud-agent-workflow", "status": "success", "summary": "MCP retrieval returned the current refund policy and source URL for citation.", "target": "refund-policy", "task_id": "customer-support-knowledge-agent", "timestamp": "2026-05-19T12:15:02Z", "tool": "MCP server"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:15:02Z"}
{"event": {"action": "draft_response", "actor_name": "gemini-ops-navigator", "actor_type": "ai_agent", "case_id": "CASE-CLOUD-003", "cost_usd_estimate": 0.021, "decision": "none", "duration_ms": 1980, "event_id": "evt-0023", "event_type": "ai_call", "evidence_ref": "evt-0023", "human_approval_required": false, "metadata": {"citations": "evt-0022"}, "phase": "execution", "risk_level": "low", "session_id": "session-cloud-agent-workflow", "status": "success", "summary": "Agent drafted a customer answer grounded in the retrieved refund policy.", "target": "customer refund question", "task_id": "customer-support-knowledge-agent", "timestamp": "2026-05-19T12:15:43Z", "tool": "Gemini"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:15:43Z"}
{"event": {"actor_name": "gemini-ops-navigator", "actor_type": "ai_agent", "case_id": "CASE-CLOUD-003", "cost_usd_estimate": 4.82, "decision": "none", "event_id": "evt-0024", "event_type": "cost_signal", "evidence_ref": "evt-0024", "human_approval_required": false, "metadata": {"monthly_projection_usd": 143.6}, "phase": "risk_review", "risk_level": "medium", "risk_reason": "Projected monthly model spend exceeded the manager's prototype budget.", "session_id": "session-cloud-agent-workflow", "status": "warning", "summary": "Cost guardrail warned that the high-quality model should be reserved for escalations.", "task_id": "customer-support-knowledge-agent", "timestamp": "2026-05-19T12:16:24Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:16:24Z"}
{"event": {"actor_name": "support-manager", "actor_type": "human", "case_id": "CASE-CLOUD-003", "decision": "approved", "event_id": "evt-0025", "event_type": "approval_gate", "evidence_ref": "evt-0025", "human_approval_required": true, "metadata": {"approved_budget_mode": "escalation_only"}, "phase": "approval", "risk_level": "low", "session_id": "session-cloud-agent-workflow", "status": "success", "summary": "Human approved the workflow with a rule that expensive model calls are escalation-only.", "task_id": "customer-support-knowledge-agent", "timestamp": "2026-05-19T12:17:05Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:17:05Z"}
{"event": {"actor_name": "agentops-recorder", "actor_type": "system", "case_id": "CASE-CLOUD-003", "decision": "none", "event_id": "evt-0026", "event_type": "task_end", "evidence_ref": "evt-0026", "human_approval_required": false, "metadata": {"submission_lanes": "google,microsoft"}, "phase": "handoff", "risk_level": "none", "session_id": "session-cloud-agent-workflow", "status": "success", "summary": "Closed cloud-agent workflow case with source citations, cost guardrail, and human approval captured.", "task_id": "customer-support-knowledge-agent", "timestamp": "2026-05-19T12:17:46Z"}, "source": "human-ai-operations-control-plane", "sourcetype": "agentops:json", "time": "2026-05-19T12:17:46Z"}