kathrine@acme-corp.com (HR dept · ACME002211) attempted to upload Financial_proj_2026.xlsx (2.1 MB · Restricted · Financial Data) to kathrine.reyes83@gmail.com at 09:42. The AI blocked the upload on device UID-0C52796C before any data left the network — 98% confidence, exact match to 4 prior confirmed data exfiltration patterns. The file was fingerprinted and a confidential tag applied org-wide. Action was fully reversible (admin can release the block). This was preceded by kathrine@acme-corp.com accessing 43 Finance documents in 2 minutes — a department she has no regular access to.