Molecule

Provenance

Where the numbers came from. 36 instances across 33 screens, under a block of counted evidence.

voice/docs/voice.md requires a number to name its claim, its scope and its window. The number carries the first. This carries the other two, and without it a count in this product is a figure rather than evidence.

A slot has no variant matrix, and that is the finding rather than a thin component. Six molecules turned out to be slots at step 2, measured in a browser: between them they show 71 distinct sets of child zones and one computed form each. Their pages say so, so nobody looks for a matrix that does not exist.

Anatomy

dark, shipped

Read from Entra sign in and EDR · six hours before the case opened · this tenant only

light, the pair

Read from Entra sign in and EDR · six hours before the case opened · this tenant only

Variants

None. It is a slot: 5 sets of child zones and one computed form.

Axis a reader looks forValuesWhy the cell is empty
kind of source–Prohibited. Which systems were read is content. A modifier per source would need a new value the first time a provider adds one
emphasis–It is the quietest line under the quietest block. There is nothing below it to recede to
placement–Always last in its block. A provenance line above the numbers would be a preamble nobody reads

When to use it

Under any block whose content is counted: the evidence, the latitude ladder, the client summary. It is the line an auditor reads first and the analyst reads last.

Where she meets it. When she is about to disagree. A verdict she accepts needs no provenance; a verdict she is going to reject needs to be checked against what Clerk actually looked at, and this is that list.

Rule and anti-rule

Do

Read from Entra sign in and EDR · six hours · this tenant only

The systems, the window and the scope, in that order, under the numbers they produced.

Do not

Based on available telemetry

Never a paraphrase. A provenance line that does not name the systems is a sentence that looks like evidence and is not, which is the exact failure this component exists to prevent.

Limits

Rules of composition and context, which no anti-rule can carry: nothing else is the right component to take, and what is wrong is the count or the neighbour. Counted on the grey corpus at stage 09, and every one of them is a function in design/kit/checks/rules.mjs. Full table with sources on Architecture.

States

It has none, and it is not interactive.

dark, shipped

Read from Entra sign in and EDR · six hours before the case opened · this tenant only

light, the pair

Read from Entra sign in and EDR · six hours before the case opened · this tenant only

What it reads, and where it stands

RoleSurfaceWhere on the componentDarkLight
--text-primaryink 4.5:1the names of the systems
--text-secondaryink 4.5:1everything else
--line-separatorline, exemptthe hairline above it

Copy this

<p class="prov">Read from <b>Entra sign in</b> &middot; six hours &middot; this tenant only</p>

Where it stands