Alert at contain
Naomi Farouk
Information Technology · Cybersecurity Operations · IT7C Major Incident
$57k
value
94%
confidence
40
people affected
1h 45m
age
2h 8m
sla
25%
progress
Currently held by
Phishing Response Agent
An agent owns the next move
Raised by
Elena Whitfield
Requester of record
At station
Contain
Workflow layer · station 2 of 8
Where this train is on the line
Evidence trail
Every station this unit has passed, who acted, and what they left behind
This is the readable trail. more
Cleared declare
-105mDirector, Security Operations
Approval recorded with rationale and policy clause cited
Holding at contain
-53mThreat Intelligence Agent
Inputs, rule version and output hash written to the evidence log
What happens next
The next station and its rule
Human commander
run by Director, Security Operations · Policy layer
Held for a named human when the unit exceeds the alert decision envelope, when confidence falls below the floor, or when a policy clause is engaged.
approver Director, Security Operations
Why the signal is what it is
Derived from time against commitment, not from the state
Green. This item is still inside the time it was committed to, and it is not close enough to that line for its materiality to pull it forward. Green says nothing about who holds it: an item can be green and sitting with a person.