Layout, contracts, and data shapes are real. The data shown is illustrative. Real customer data flows live with our first design partner.
T9 · audit-ledger
Incident Replay
For each public-record AI-provenance incident, the verdict shape a wired veric control would have produced at compile time — before the misbehaving model ever shipped. The public story for each incident lives at /ai/incidents; this view is the internal counterfactual.
- inc-air-canadaTier T8
Air Canada chatbot misinformation
A passenger booking-assistant chatbot represented bereavement-fare policy as retroactively claimable. The actual policy required pre-travel claims. The Civil Resolution Tribunal awarded the passenger CAD $812.02 and rejected the airline's defence that the chatbot was a separate legal entity.
↪ FTC Act §5; EU UCPD 2005/29/ECOpen replay → - inc-nyt-openaiTier T6+T8
New York Times v. OpenAI & Microsoft
The New York Times filed a federal copyright suit alleging GPT-4 and Copilot were trained on millions of Times articles without a license, and that GPT-4 emits Times reporting near-verbatim in response to common prompts. The complaint pleads billions of dollars in statutory and actual damages.
↪ EU AI Act Art. 53(1)(d); 17 USC §501; DMCA §1202Open replay → - inc-italian-dpa-replikaTier T6+T7
Replika — Italian DPA enforcement
Italy's GPDP issued an immediate-effect order banning Replika from processing Italian users' data, citing absent age-verification, no clear lawful basis, and reports of sexually explicit chat output to minors. Two later €5M fines (Apr 2025, May 2025) extended liability separately to deployment and to the underlying training run.
↪ GDPR Art. 5(1)(c), Art. 6, Art. 17; Italy GPDP Provv. n. 9852506Open replay → - inc-samsung-leakTier T6
Samsung internal-data leak via ChatGPT
Within ~20 days of Samsung Semiconductor relaxing its ChatGPT-use policy in March 2023, three confidential-data leak events were attributed to employee prompts: a ~6,000-line semiconductor source code dump, equipment yield/sensor data, and an internal meeting recording. Samsung concluded the data was effectively unrecoverable from third-party model checkpoints and banned generative AI on company devices.
↪ Trade-secret common law; NIST AI 600-1 §3.5 Data-PrivacyOpen replay →
Cross-references
- · /vault/registry — every model whose deploy would have been gated on these contracts
- · /vault/audit — read-only auditor view of the same incident table
- · /ai/incidents — the public-facing archive (10 incidents, journalism register)