Risk intelligence

Watchlist rules, source-trust floors, geography aliases, and optional auto-watch after ingest.

No saved tuning yet — defaults apply until you save (geo aliases empty, automation off).

Workflow

Trust, geography, automation

Tuning applies on ingest. Set SCR_AUTOMATION_DISABLED=1 in the environment to disable auto-watch globally.

Source trust floor (0–100, empty = off)Dashboard severity highlight (empty = off)

Geography aliases (JSON object)

Auto-watch new eventsfrom

Automation actor (triage log author)

Empty event-type or country lists mean "match all". Rules power dashboard watchlist counts and feed badges.

New rule