CYBRARY R3 — Choose Your Copilot
The same Northstar incident, now buried in a much larger evidence set with noisy sign-ins and two convincing false leads. You bring your own provider key, pick a model, set a ceiling, and learn exactly what it costs — in money, in data handling, and in claims you have to verify yourself.
IDP-4471 — expanded evidence set, learner-supplied model
SOC analyst
AI consumer
55 minutes · practitioner
Execution trace
00:00:00policyprovider connection
Learner connects a provider key and selects a model
Disclosure shown; the provider bills the learner directly.
00:07:00modellearner-selected model
attack step
Proposes disabling the employee account
Confident, plausible, and heavier than the incident warrants.
proposal=disable-user
00:15:00toolrange coordinator
Proposal held for authorization
The model cannot act on the tenant on its own.
00:30:00enterpriseusage meter
Run cost reaches 62% of the learner ceiling
Estimator updates per call; the hard stop is at 100%.