Your work, in focus
Explore the evidence behind your systems, activity, and recurring workflows. Every view follows the selected workspace and run.
What Phantom is Learning
Real-time operational intelligence distilled across six structural discovery dimensions.
Why We Collect These Signals
How raw operational activity transforms into defensible, evidence-backed recommendations.
Strict Epistemic Policy: Not every observed pattern becomes an automation recommendation. Phantom validates recurring operational burden, measures empirical friction, and requires explicit human operator sign-off before proposing any intervention.
What Phantom Currently Observes
High-level aggregate inventory of systems and work tools actively discovered in this engagement.
Primary Operational Systems & Work Tools Discovered
What Phantom Does NOT Collect
We collect operational signals and metadata rather than recording everything you type or see.
You Remain In Control
You and your team maintain complete governance over all collected telemetry, privacy scopes, and recommendations.
What Happens Next
Your operational discovery roadmap from initial observation to evidence-backed deliverable.
Users & Access
Manage workspace membership. Access is enforced by the MRI Hub for every request.
| UID | Role | Status | Action |
|---|
Endpoint credentials
Issue a credential bound to this workspace and endpoint. The token is never rendered; the acceptance flow downloads it for endpoint configuration.
Live Agent & Operational Activity
Real-time reconstruction of CLI coding agent tool executions, OpenClaw agent handoffs, Git commits, and filesystem state mutations.
Agent Activity Timeline
Claude Code / OpenClawRecent System Changes
Git & FilesystemOperational Visibility Gaps
Telemetry IntegrityParent PID tracking correlates agent terminal instances to subprocesses.
Redaction engine active across all command lines, payloads, and file paths.
Client Control & Review Center
Govern discovery scope, validate reconstructed workflows, promote automation wedges, and audit immutable review history.
| Detected System / Workspace | Category | Type | Observed Frequency | Current Scope | Change Classification | Review Notes | Action |
|---|---|---|---|---|---|---|---|
| Loading detected systems and workspaces... | |||||||
| Timestamp | Target Type | Target Identifier | Decision State | Scope | Promotion Tier | Reviewer | Audit Notes |
|---|---|---|---|---|---|---|---|
| Loading audit history... | |||||||
Operational Discovery Map
Interactive topology connecting desktop tools, visited web domains, reconstructed workflows, background daemons, and listening network ports.
Operational MRI & Client Review
Audited operational findings enforcing strict claim discipline. Every finding distinguishes witnessed facts from deductions.
Automation Wedges & Opportunities
Consolidated, evidence-backed intervention points. Distinguishes top defensible recommendations from exploratory hypotheses.
Reconstructed Operational Workflows
Deterministic workflow sequences reconstructed from window transitions, browser interactions, and socket handoffs.
Evidence Explorer
Technical audit trail of all canonical events with raw payloads, SHA-256 provenance, and non-destructive privacy masking.
| OBSERVED AT | SENSOR | EVENT TYPE | ACTOR | TARGET / DETAILS | PROVENANCE | STATUS | ACTION |
|---|---|---|---|---|---|---|---|
| Loading evidence events... | |||||||