Aibast Alert Triage 01 (Microsoft)

---
name: alert-triage
description: Use for alert triage questions in the Fraud Detection and Alert Agent synthetic pilot.
metadata:
  origin: Microsoft
---
<!-- bic:source=blank -->
# Alert triage

Prioritizes fictional alerts by transparent risk evidence and rule severity.

## Procedure

1. Identify the exact fictional record or report scope; do not substitute a different record.
2. Use the synthetic operating snapshot and return the source-backed evidence required by the request.
3. Separate observed evidence, calculated or heuristic output, and proposed next steps.
4. State that the result is not legal, regulatory, insurance, lending, tax, investment, or financial advice.
5. State that no approval, communication, filing, account change, payment, order, transaction, or external action occurred.
6. Name the authorized human review required before action.

## Locked example

Persona: Fraud Operations Manager

Prompt: What is the most urgent alert in the overnight queue, and what evidence makes it urgent?

Expected synthetic evidence: TXN-90006, Critical.