AI Control Tower · execution

completeL2

exec-4821-01

NotReady / ErrImagePull investigation with full evidence seal and SSL-exclusion recommendation.

Incident
inc-4821
Agent
Kubernetes Agent 01
Model
claude-sonnet-4.5
Tool
k8s-read
Tenant
Nordic Federated Bank
Customer
FS Core Banking Platform
Audit corr
corr-4821-a1
Approval
apr-302
All executionsIncident workspaceApproval queue

exec-4821-01

Prompt → agent → model → MCP → evidence → policy → approval path.

Read-only Agent OS
  • No shell execution
  • No cluster-admin
  • No secret reads
  • No database writes
  • No firewall changes
  • No autonomous remediation
  1. promptok2026-08-02T06:41:12Z

    1. Operator prompt

    Why is fs-prod-cs-tool2 NotReady?

  2. securityok2026-08-02T06:41:12Z

    2. Prompt firewall

    Injection score 0.01 · tenant boundary enforced.

  3. agentok2026-08-02T06:41:13Z

    3. Kubernetes Agent

    ag-kubernetes-01 · skill=node-notready.

  4. modelok2026-08-02T06:41:14Z

    4. Model Gateway

    Anthropic claude-sonnet-4.5 · EU residency.

    • latencyMs=384
    • tokens=18240
  5. mcpok2026-08-02T06:41:38Z

    5. MCP · k8s-read

    get node fs-prod-cs-tool2 → NotReady.

  6. mcpok2026-08-02T06:43:04Z

    6. MCP · log-reader

    kubelet journal redacted · 412 lines.

  7. approvalok2026-08-02T06:45:33Z

    7. Egress probe approval

    net-diag probe approved by Network Operations.

    • approvalId=apr-302
  8. verificationok2026-08-02T06:48:02Z

    8. RCA sealed

    Confidence 88% · SSL-inspection exclusion recommended; no console write.

    • confidence=88