SignalRoom - Voice-Led SOC Incident Training

Junior analysts need more than static quizzes: they need to practice asking for evidence before making a security decision. SignalRoom presents a synthetic suspicious sign-in and lets the learner investigate it by voice. AssemblyAI's Voice Agent API handles live speech, turn-taking, and tool-call requests. The app exposes only six constrained scenario tools: four read-only evidence lookups, one simulated decision recorder, and one investigation finisher. Evidence appears progressively with stable IDs. After the learner records a finding, severity, and proposed action, a deterministic local evaluator checks those decisions against the evidence actually revealed. The debrief labels claims Observed, Inferred, or Unsupported and shows missed evidence categories. A scripted offline replay is available for reproducibility; it is not a substitute for a live provider demonstration. SignalRoom uses one fully synthetic scenario. It does not connect to a production SIEM or EDR and never disables a real account. A controlled local end-to-end AssemblyAI voice session was verified on September 26, 2026. The current server still runs on localhost and is not a public multi-user deployment.