Turn alert volume into a review policyThe sample is loaded. Run it, then replace it with your own scored alerts.
Routing plan
Auto-act
Human review
Monitor
Auto-close
Budget used
Budget to incident capture
Routed alerts
Queue
Alert
Score
Severity
Route
Review
Reason
The queue value is a transparent heuristic: uncertainty × severity × estimated impact, divided by review time. Labels are optional; when supplied, the curve reports observed positive-alert capture. Without labels, it reports expected risk capture.