← All features
FORENSICS
Incident Replay
Select any time window and replay exactly what your agent did — step by step, hash by hash.
How it works
Incident Replay reconstructs the exact sequence of actions an agent took during any time window. Select a start and end time, and RANKIGI replays every event in order — including the tool invoked, the payload hash, the chain hash, and the timestamp. Each event is verified against the hash chain to confirm no tampering occurred. If intent records exist, they can be decrypted inline to show the agent’s reasoning at each step.
Technical details
Events queried from event_hash_chain by agent_id and time range. Each event verified against chain hash. Intent records decrypted on demand with audit logging. Export as JSON or PDF for regulatory submission.
Compliance mapping
SOC 2 A1.2 (Change Management)HIPAA 164.312(b) (Audit Controls)PCI-DSS 10.2
Use cases
- • Post-incident forensic analysis
- • Regulatory audit responses
- • Customer dispute resolution