Organism
Document
A screen that is a page rather than a console. 5 instances across 5 screens: the log entry, one column, no pane, no list, read from the top.
It is what node 5.4 is, and node 8.1 turned out to be the same situation under a different name. That is why .z4--solo and .z4--entry were collapsed at stage 07 into one rule: the screen is the page, and a column with no pane beside it does not need two names for the same absence.
It was not in the register. Step 2 built the register from a browser census of controls, and a document body has none of its own. docs/inventory.md section 13 has all thirteen that were missed.
Anatomy
A scaled scene, not a diagram. The zones of a document are its sections, and a block drawing of them would say less than the sections do. This is the real markup in a smaller box: real type, real spacing, real ink. The only fiction is the height, which is 560px here and as long as the record in the product.
dark, shipped
C-4417 · Larkfield Logistics Decided 2026-08-22T04:41:12Z · snapshot read 27m before the ruling
What was decided, and by whom
Escalated, not ruled. Handed to S. Varga, SOC lead, by R. Idrissi. Clerk’s verdict, real, contain identity, stands unruled.
The evidence as it stood, 9 signals
identityA refresh token was presented from ASN 41xxx, first time for this tenantEntra sign in
not foundno password change, and no new device enrolmentEntra, EDR
6 sources queried over 24h as it stood: Entra ID, Exchange audit, EDR, proxy, threat intel, tenant baseline.
The address of this record
/log/e-88214?as-of=2026-08-22T04:14:05ZCopy the addressThe address is the artefact. Without ?as-of it resolves to this entry’s own decision time.
the frame around it in the product belongs to frame, not to this
light, the pair
C-4417 · Larkfield Logistics Decided 2026-08-22T04:41:12Z · snapshot read 27m before the ruling
What was decided, and by whom
Escalated, not ruled. Handed to S. Varga, SOC lead, by R. Idrissi. Clerk’s verdict, real, contain identity, stands unruled.
The evidence as it stood, 9 signals
identityA refresh token was presented from ASN 41xxx, first time for this tenantEntra sign in
not foundno password change, and no new device enrolmentEntra, EDR
6 sources queried over 24h as it stood: Entra ID, Exchange audit, EDR, proxy, threat intel, tenant baseline.
The address of this record
/log/e-88214?as-of=2026-08-22T04:14:05ZCopy the addressThe address is the artefact. Without ?as-of it resolves to this entry’s own decision time.
the frame around it in the product belongs to frame, not to this
.docthe body. A flex column at--space-5between its sections, padded--space-5over--space-4. It owns no scroll of its own: Z4 scrolls at the desk and the document scrolls at 360.doc h1--size-xlat weight 600 on--leading-tight. One heading, and it names the record rather than the producth1 .stamplinethe stamp line is part of the heading. A block inside theh1at--size-smin mono and--text-secondary, wrapping anywhere. This is the surface an auditor arrives at months later, and the first thing they need is the identifier they can quote@media print16pt of padding, and nothing else.base.cssowns the printed surface; this is the document’s share of it, because print is a surface and not a component- what fills itblock, claim, prov, addr, anote and tomb. All of them are the case pane’s own parts, and that is the point: the record is the same argument read as a page
Variants
There are none. The empty axes are shown rather than skipped, because two of them were live decisions that closed.
| Axis | Value | Uses | The rule |
|---|---|---|---|
| placement | no values | – | Closed at stage 07 step 6. .z4--entry on node 5.4 and .z4--solo on node 8.1 were one situation under two names, and neither was ever a form of this. The context lives on Z4 and changes how the children paint |
| width | no values | – | The measure belongs to frame at --width-frame, 820px. A document that set its own width would fight the frame around it, and the frame is the thing that says what the reader is holding |
| state | no values | – | An entry whose snapshot expired, changed or went missing renders the same document with a tomb where the evidence was. The record does not change shape because part of it is gone, which is the whole reason it is a record |
When to use it
On a log entry, and on any surface that is read rather than worked. If the analyst is deciding something, the surface is the split and the body is pane body. If somebody is reading what was already decided, it is this.
Where she meets it. Rarely, and never in a hurry. This is the surface of the main job’s last clause, and I can still defend it months later: an auditor, a client asking why, or the analyst herself proving what was known at 04:14 rather than what is known now. It is also the one screen in the product that is designed to be printed.
Rule and anti-rule
Do
C-4417 · Larkfield LogisticsDecided 2026-08-22T04:41:12Z · snapshot read 27m before the ruling
The identifier inside the heading. One heading, read once, and the string an auditor quotes is the second line of it.
Do not
C-4417 · Larkfield Logistics
Decided 2026-08-22T04:41:12Z · ?as-of=2026-08-22T04:14:05Z
Never as a stamp under the title. stamp is the atom for the line at the foot of a case pane body, where the analyst has already read the argument. On a document it detaches the name of the record from the record and leaves the heading saying less than it knows.
States
It has none, and it is not interactive. There are no verdict controls on this page at any width: you cannot rule on the past, and an Accept here would be a second decision wearing the first one’s date.
dark, shipped
C-4417 · Larkfield LogisticsDecided 2026-08-22T04:41:12Z
What was decided, and by whom
Escalated, not ruled. Handed to S. Varga, SOC lead.
light, the pair
C-4417 · Larkfield LogisticsDecided 2026-08-22T04:41:12Z
What was decided, and by whom
Escalated, not ruled. Handed to S. Varga, SOC lead.
The links and the copy button inside it carry their own states, and the printed rendering is the sixth state of this surface rather than a seventh theme.
What it reads, and where it stands
| Role | Surface | Where on the component | Dark | Light |
|---|---|---|---|---|
--text-primary | ink 4.5:1 | the heading, and the reading ink of the whole record | ||
--text-secondary | ink 4.5:1 | the stamp line under the title, in mono | ||
--bg-page | fill | inherited, never set. The document takes the ground of whatever holds it |