Cybrary ForgeCYBRARY / FORGE
Activity brief
Foundational
support-enterprise-v3
Open on a full linux desktop

Read the Trace

A customer says the assistant promised a refund it never issued. You have one agent run's telemetry — prompts, retrieval, tool calls and enterprise logs — and must reconstruct exactly what happened and configure the telemetry so the next reconstruction is not guesswork.

Complaint CS-9917 — 'the bot told me my refund was approved'
SOC analyst
AI engineer
30 minutes · foundational
Execution trace
00:00:00usercustomer chat

Customer asks about a damaged item

Ordinary request, no unusual language.

00:00:02modelsupport-agent-model@2026.06
attack step

Model states the refund is approved

The visible answer promises a refund. No tool call follows.

00:00:04tooltool-broker → refund.issue

Call attempted and rejected

Rejected by a billing precondition. The rejection is not surfaced to the customer or the log.

result=precondition_failed

00:04:00enterprisebilling-api

No refund record exists

Billing has no matching transaction — the promise was never actionable.

01:00:00alertsupport QA
attack step

Complaint raised

24 hours later the AI trace has already aged out under the current retention setting.