Post-incident review
Disciplined technical reconstruction when AI becomes part of an incident question.
Support for legal, executive, and security teams when an AI system, agent, workflow, RAG system, or security control becomes relevant after a serious event.
What you receive
Concrete outputs for a specific decision.
- Technical reconstruction
- Artifact-quality review
- Timeline and system-state notes
- Control and logging gaps
- Customer, counsel, or executive readout support
01
Review focus
- Agent actions, tool calls, retrieval paths, prompts, outputs, approvals, logs, and configuration state.
- Security controls, identity posture, access changes, audit logs, and remediation steps.
- What is known, what is uncertain, and what additional materials would be needed.
Limits
Scope and assumptions stay explicit.
- The review is technical and scoped; it does not replace legal advice or managed incident response.
Next step