Anomalies, four ways

The funnel is the same in each. Governance and guardrails still decide the action. Only the anomalies monitor changes.

1. A mark drops into the log

Each action drops a square into the monitor. A new action starts a row. Repeats land on the row that is already there. Eight github.get_file marks turn that row into a data exfiltration alert.

Devicemacbook · a.chen

Agent

Cursor

Governance

approved

Deny a connector, tool, or agent.

Cursor→github.create_pull_request

Guardrails

every tool
  • Parameter Validation
  • Credential & Secret Protection
  • Destructive Action Blocking
  • PII & Personal Data Protection
  • Tool & Server Isolation

Tool

GitHub

Anomalies

listening

Listening across actions, in groups.

  • github.create_pull_request×1
no anomaly

2. One filling meter

The monitor watches a single group, github.get_file, as four slots. Each download fills the next slot. When the last slot fills, the meter turns orange and reads Data exfiltration.

Devicemacbook · a.chen

Agent

Cursor

Governance

approved

Deny a connector, tool, or agent.

Cursor→github.create_pull_request

Guardrails

every tool
  • Parameter Validation
  • Credential & Secret Protection
  • Destructive Action Blocking
  • PII & Personal Data Protection
  • Tool & Server Isolation

Tool

GitHub

Anomalies

one group

github.get_file

0 of 4

3. Context beside the funnel

The column beside the funnel is Context. Each finished request is its own row. When enough github.get_file runs complete, that past group is outlined in orange as an anomaly. The action line still ends at the tool.

Devicemacbook · a.chen

Agent

Cursor

Governance

approved

Deny a connector, tool, or agent.

Cursor→github.create_pull_request

Guardrails

every tool
  • Parameter Validation
  • Credential & Secret Protection
  • Destructive Action Blocking
  • PII & Personal Data Protection
  • Tool & Server Isolation

Tool

GitHub

Context

Detecting

  • github.create_pull_request

4. A timeline

Each finished action is a tick, in order. Matching ticks sit together. A bracket appears over the github.get_file cluster once it is long enough, labeled Data exfiltration.

Devicemacbook · a.chen

Agent

Cursor

Governance

approved

Deny a connector, tool, or agent.

Cursor→github.create_pull_request

Guardrails

every tool
  • Parameter Validation
  • Credential & Secret Protection
  • Destructive Action Blocking
  • PII & Personal Data Protection
  • Tool & Server Isolation

Tool

GitHub

Anomalies

across actions

github.create_pull_request

no anomaly