Quick Links

Tenant facts in Hearth

Overview

Facts are the durable details that Hestia learns about your workspace. These details include schema quirks, service accounts, baseline patterns, and tooling notes. Hearth keeps a list of facts for each workspace and adds the active ones to Hestia's context at the start of every investigation, briefing, and chat. As a result, the agent does not have to learn the same details again on every run.

You manage facts on the Facts page of the tenant (Account > Tenant profile). On this page, you can review what Hestia knows, add a fact, correct or verify a fact, and retire a fact that is no longer true. A retired fact stays on file, so you do not lose the record that the fact was once true.

How it works

A fact is a single short observation about your workspace, along with its metadata. The following table describes the parts of a fact:

PartDescription
TextOne declarative sentence. For example, "dst_user is rarely populated; prefer cloud_user for auth queries."
CategoryOne of the following: schema_quirk, data_pattern, tooling_note, investigation_lesson, operational, or other.
ConfidenceLow, medium, or high.
VerifiedA badge that a person enables after a review of the fact. Hearth trusts verified facts first.
NotesOptional context, such as a ticket link or the conditions that invalidate the fact.
ProvenanceThe date that someone added the fact, the person who added it, and an artifact backlink when the fact came from a specific investigation.

How facts reach Hestia

At the start of each run, Hearth adds the active facts of your workspace to Hestia's context. Hearth marks these facts as observations to treat as information, never as instructions. Hearth orders the facts as follows:

  1. verified facts first
  2. then confidence, from high to low
  3. then the date added, from most recent to oldest

Hearth uses up to 30 active facts for each run. Because of this order, the most direct way to ensure that Hestia relies on a fact is to mark the fact as verified.

How facts reach the list

The following three paths add facts to the list:

  • Hestia records a fact during a run. When the agent notices something durable and non-obvious, it saves the fact automatically. These facts arrive as low confidence and unverified by design, so that a person reviews and promotes them before Hestia trusts them. Hearth also caps the number of facts that the agent can add in each run.
  • You use "Remember this" on an artifact. You can ask Hestia to distill candidate facts from a finished investigation or another artifact. Hestia proposes the facts, and Hearth saves nothing until you review, edit, and confirm what to keep. Hearth links each confirmed fact back to its source artifact.
  • You add a fact manually. Use the "Add a fact" bar on the Facts page.

Retiring a fact

Some facts are true for a period and then become inaccurate. For example, "Jake is currently an at-risk user" stops being current after Jake is cleared. Do not delete the fact. Instead, mark it stale. A stale fact stays on file for the audit trail, because the fact was true once, but it stops flowing into Hestia's context. You can reactivate a stale fact later if circumstances change. Deletion removes a fact outright.

Hearth stores all facts by workspace and scopes them to your org_id. One workspace never sees the facts of another workspace.

What you can see and do

Role permissions

The following table describes the role that each action requires:

ActionRequired role
View the Facts pageAny role with the View Artifacts permission. Every built-in role includes this permission by default (viewer and above).
Add, edit, delete, retire, or reactivate a factOwner or administrator
Ask Hestia to propose facts from an artifact ("Remember")Owner or administrator

Changes to facts are workspace-configuration writes, because a fact steers every future agent run. Hearth routes these actions through the manage-tier gate and enforces the gate in production today. An analyst or a viewer can see the page and its buttons, but Hearth refuses the save.

Note: A proposal from Hestia also spends workspace credits, because it runs Hestia.

Elements of the Facts page

The following table describes the elements of the Facts page:

ElementDescription
Add a fact barAppears at the top of the page, regardless of how many facts you have, so that you can capture a fact manually at any time.
Saved facts listLists your saved facts with a count. Each row shows the text of the fact, its category and confidence pills, a verified or unverified badge, an obviated badge if the fact is stale, and the name of the person who added it. If the fact came from an investigation, a from artifact link opens the source.
Active fact controlsEdit, Mark stale, and Delete
Retired (stale) fact controlsReactivate and Delete. A stale row also shows who obviated the fact, the date, and the reason. You cannot edit a stale fact until you reactivate it.
Edit panelAllows you to change the text, category, confidence, verified flag, and notes of a fact.

Adding a fact

To add a fact manually, do the following:

  1. Navigate to Tenant profile.
  2. On the Add a fact bar, click Add.
  3. In the text box, type one sentence that you want Hestia to remember.
  4. Select a category and a confidence level.
  5. (Optional) Type any notes that give the fact context.
  6. Click Add fact.

Note: The Verified check box is available only when you edit an existing fact.

Verifying or correcting a fact

To change a fact or mark it as verified, do the following:

  1. On the fact that you want to update, click Edit.
  2. Change the text, category, confidence, or notes as needed.
  3. (Optional) After you review the fact, select the check box next to Human-reviewed.
  4. Click Save.

Hestia trusts verified facts first.

Retiring a fact that is no longer true

To retire a fact, do the following:

  1. On the fact that you want to retire, click Mark stale.
  2. (Optional) Type a reason. For example, "Jake is no longer at-risk as of today."
  3. Click OK.

The fact stays on file for the audit trail but stops influencing Hestia. To return the fact to Hestia's context, click Reactivate.

Deleting a fact

To delete a fact:

  1. On the fact that you want to delete, click Delete.
  2. Confirm the deletion.

Hestia stops seeing the fact in briefings, investigations, and chat.

Remembering facts from an artifact

To have Hestia distill candidate facts from a finished artifact, do the following:

  1. Open the artifact.
  2. Click Remember.
  3. Review the candidate facts, and then edit the ones that you want to keep.
  4. Confirm the facts that you want to save.
  5. Click Save selected to memory.

The confirmed facts appear on the Facts page with a link back to the source artifact.

Note: This action spends workspace credits, because it runs Hestia.

Verifying your changes

After you add, edit, or retire a fact, verify the following:

  • a new or edited fact appears in the Saved facts list with the correct category, confidence, and verified badge
  • a retired fact shows the obviated badge and its obviation reason, and it drops out of Hestia's context on the next run
  • a reactivated fact loses the obviated badge and returns to Hestia's context
  • a fact that Hestia proposed and you confirmed shows a from artifact link to its source

Troubleshooting common issues

IssueWhat to do
The Add, Edit, or Delete button returns an errorA change to a fact requires the owner or administrator role. Everyone who can view facts can see the page and its buttons, but Hearth refuses a save from a viewer or an analyst and names the permission in the message. Ask an administrator to make the change or to grant you the role.
A fact that you added again as high confidence did not changeWhen you add a fact whose text exactly matches a saved fact, Hearth returns the existing fact without a change and does not raise its confidence. Click Edit on the existing fact to change its confidence.
Hestia does not appear to use a fact that you addedVerify that the fact is not obviated, because Hearth excludes stale facts from Hestia's context. Also consider marking the fact as verified. Hearth uses verified facts first, then higher-confidence facts, and it uses up to 30 active facts for each run.
A fact that Hestia recorded is unverified and low confidenceFacts that the agent records during a run always arrive as low confidence and unverified, so that a person reviews them before Hestia trusts them. Open the fact, confirm it, and then select the Verified check box.