The taxonomy

What actually goes wrong.

A closed vocabulary, owned by core and shared by every product in the portfolio. Fetch it — never hardcode it. Because everyone classifies against the same list, counts are comparable across subjects that have nothing else in common.

policy

reported incidents in this class · fault: environment

action not permitted
agent revoked
agent unknown
budget exceeded
constraint violated
mandate expired
mandate revoked
mandate unknown
rate limited
scope not granted
usage budget exceeded

correctness

reported incidents in this class · fault: agent

duplicate action
hallucinated reference
incomplete output
malformed output
misinterpreted intent
off tone
policy violating output
stale context
unhelpful response
unsafe output
wrong amount
wrong recipient

security

reported incidents in this class · fault: agent

anomalous pattern
credential misuse
exfiltration suspected
prompt injection suspected

counterparty

reported incidents in this class · fault: counterparty

counterparty low score
counterparty sanctioned
counterparty unknown

compliance

reported incidents in this class · fault: environment

approval threshold
data residency
regulatory hold

business

reported incidents in this class · fault: none

business rule
superseded
timing

accepted

reported incidents in this class · fault: none

risk accepted
verified correct
within policy

process

reported incidents in this class · fault: none

escalation timeout
insufficient evidence

uncategorised

reported incidents in this class · fault: none

other
uncategorised

Uncategorised is a real value, not a gap. A reporter who does not know the failure mode should not be forced to guess one — that would corrupt every count downstream.