Alert at contain in-policy
Amara Novak
Information Technology · Cybersecurity Operations · IT7A Security Alert Triage
$81k
value
93%
confidence
23
people affected
50m
age
37m
sla
71%
progress
Currently held by
AI-OPS spine
Running in the shared AI GBS spine
Raised by
Bruno Muller
Requester of record
At station
Contain in-policy
AI GBS layer · station 5 of 7
Where this train is on the line
Evidence trail
Every station this unit has passed, who acted, and what they left behind
This is the readable trail. The same actions are held in the append-only evidence spine with their authority grant, version stamps and hash links; open the auditor pack to see them.
Cleared ingest
-50mAlert Triage Agent
Spine control pack posted, three-way evidence attached
Cleared enrich
-40mAlert Triage Agent
Spine control pack posted, three-way evidence attached
Cleared score
-30mAlert Triage Agent
Spine control pack posted, three-way evidence attached
Cleared auto-close false positive
-20mAlert Triage Agent
Spine control pack posted, three-way evidence attached
Holding at contain in-policy
-10mAlert Triage Agent
Spine control pack posted, three-way evidence attached
What happens next
The next station and its rule
Analyst review
run by Director, Security Operations · Policy layer
Held for a named human when the unit exceeds the alert decision envelope, when confidence falls below the floor, or when a policy clause is engaged.
approver Director, Security Operations
Why the signal is what it is
Plain reading of the current state
Green. The agent completed this station inside its authority envelope, the confidence threshold was met, and no gate rule was triggered. Nobody was asked to look at it.
Past SLA by 13m · 23 people or records downstream of this decision