Fraud detection in an agentic world is hard: evidence for a decision is scattered, only some calls should reach a human, and all must stay auditable. This talk builds Marshal, a fraud investigation console. It assembles the evidence server-side in MongoDB Atlas, running vector, text, and graph retrieval over one collection. Mastra's durable workflows wrap that in a deterministic flow that suspends for an approver and resumes. You get an audit trail, PII protection, and a clear path to self-improvement from production traces. Come if you're putting an agent where a regulator will look.