System 01
CSI New Analyst Toolbox
Versioned, in-workflow analyst capability with explicit authority boundaries and a monthly update path.
Strongest proof
Versioned product ownership, in-workflow support, authority boundaries, and a maintained release path.
Still unmeasured
Active users, repeat usage, time saved, quality movement, and runtime telemetry are not yet measured.
- User / workflow
- New and developing CSI analysts investigate and label messages without leaving the case page. A floating Chrome extension combines pace tracking, threat-intel lookups, queue and SOP guidance, case tracking, and on-device translation.
- Sources / actions
- Reads supported page context; surfaces SPF, DKIM, DMARC, domain, URL, DNS, and registry evidence; provides queue-aware guidance, safe links, local state, and CSV/JSON export. Approved internal guidance controls; team discussion only corroborates scoped decisions.
- Scope limits
- No autonomous labeling. Official SOPs, queue rules, escalation paths, and analyst judgment remain authoritative. Snapshot evidence is labeled non-live; unresolved conflicts escalate; exported files may contain work data.
- Owner
- Marquetta Moore — product concept, workflow research, architecture, implementation, documentation, testing, and 30+ releases. Human guide owners retain policy authority.
- Test method
- Regression coverage across manifest and permissions, labeling rules, migration, fallbacks, translation, secure CSV, accessibility and keyboard use, narrow screens, and packaging using offline fixtures.
- Failure modes
- Blocked DNS or RDAP, stale or conflicting guidance, missed page regions, import type mismatch, hidden navigation state, and managed-browser policy. Live authenticated selectors and enterprise-network variation remain partially unverified.
- Monitoring
- Versioned changelog plus feedback form. A daily rule monitor feeds a human-reviewed monthly preview queue, month-end release checks, and first-of-month changelog rollover. Runtime telemetry is not yet measured.
- Adoption
- Audience and workflow are documented. Active users, repeat usage, time saved, QA disagreement, and behavior change are not yet measured.
Internal guide build v3.34 · 30+ releases
Open case study