{
  "format": "minctrl.process/v1",
  "graph": {
    "edges": [
      {
        "id": "e0___start____intake",
        "source": "__start__",
        "target": "intake"
      },
      {
        "id": "e1_intake__corr_split",
        "source": "intake",
        "target": "corr_split"
      },
      {
        "id": "e2_corr_split__correlate",
        "source": "corr_split",
        "target": "correlate"
      },
      {
        "id": "e3_corr_split__impact",
        "source": "corr_split",
        "target": "impact"
      },
      {
        "id": "e4_correlate__analyze",
        "source": "correlate",
        "target": "analyze"
      },
      {
        "id": "e5_impact__analyze",
        "source": "impact",
        "target": "analyze"
      },
      {
        "id": "e6_analyze__disp",
        "source": "analyze",
        "target": "disp"
      },
      {
        "id": "e7_disp__ticket",
        "label": "routine actionable incident",
        "source": "disp",
        "target": "ticket"
      },
      {
        "id": "e8_disp__draft_p1",
        "label": "candidate P1 / major outage",
        "source": "disp",
        "target": "draft_p1"
      },
      {
        "id": "e9_disp__supp_gate",
        "label": "non-actionable noise cluster",
        "source": "disp",
        "target": "supp_gate"
      },
      {
        "id": "e10_draft_p1__p1_gate",
        "source": "draft_p1",
        "target": "p1_gate"
      },
      {
        "id": "e11_p1_gate__check_regulatory_trigger",
        "label": "declaration signed",
        "source": "p1_gate",
        "target": "check_regulatory_trigger"
      },
      {
        "id": "e12_p1_gate__correlate",
        "label": "rejected — re-correlate",
        "source": "p1_gate",
        "target": "correlate"
      },
      {
        "id": "e13_check_regulatory_trigger__declare",
        "source": "check_regulatory_trigger",
        "target": "declare"
      },
      {
        "id": "e14_supp_gate__validate_suppress_rule",
        "label": "suppression approved",
        "source": "supp_gate",
        "target": "validate_suppress_rule"
      },
      {
        "id": "e15_supp_gate__correlate",
        "label": "rejected — re-correlate",
        "source": "supp_gate",
        "target": "correlate"
      },
      {
        "id": "e16_validate_suppress_rule__suppress",
        "label": "validation passed — false-negative rate within threshold",
        "source": "validate_suppress_rule",
        "target": "suppress"
      },
      {
        "id": "e17_validate_suppress_rule__supp_gate",
        "label": "validation failed — rule over-suppresses, revise and re-approve",
        "source": "validate_suppress_rule",
        "target": "supp_gate"
      },
      {
        "id": "e18_ticket__monitor",
        "source": "ticket",
        "target": "monitor"
      },
      {
        "id": "e19_declare__monitor",
        "source": "declare",
        "target": "monitor"
      },
      {
        "id": "e20_suppress__monitor",
        "source": "suppress",
        "target": "monitor"
      },
      {
        "id": "e21_monitor__escalate_sla_breach",
        "label": "SLA threshold breached — incident open beyond P1 SLA window",
        "source": "monitor",
        "target": "escalate_sla_breach"
      },
      {
        "id": "e22_escalate_sla_breach__monitor",
        "source": "escalate_sla_breach",
        "target": "monitor"
      },
      {
        "id": "e23_monitor__correlate",
        "label": "accuracy metrics degrade OR false-positive rate >5% OR false-negative rate >2%",
        "source": "monitor",
        "target": "correlate"
      }
    ],
    "nodes": [
      {
        "agent": null,
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "__start__",
        "interrupt_before": false,
        "kind": "terminal",
        "label": "Start",
        "position": {
          "x": 0,
          "y": 0
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "terminal",
        "tools": []
      },
      {
        "agent": "intake",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "intake",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Ingest the live alarm stream and enrich each event with topology and inventory context",
        "position": {
          "x": 0,
          "y": 120
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "oss-inventory",
          "netcracker",
          "ems-fault-mgmt"
        ]
      },
      {
        "agent": null,
        "confidential": false,
        "gate": null,
        "gateway": "parallel",
        "human": null,
        "id": "corr_split",
        "interrupt_before": false,
        "kind": "gateway",
        "label": "Run topological correlation and service-impact analysis concurrently",
        "position": {
          "x": 0,
          "y": 240
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "gateway",
        "tools": []
      },
      {
        "agent": "correlator",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "correlate",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Deduplicate and cluster the flood via temporal-topological correlation into candidate incidents",
        "position": {
          "x": 0,
          "y": 360
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "aiops-correlation",
          "topology-graph"
        ]
      },
      {
        "agent": "analyzer",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "impact",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Score blast radius and SLA exposure of affected services for each forming cluster",
        "position": {
          "x": 0,
          "y": 480
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "service-impact-map"
        ]
      },
      {
        "agent": "analyzer",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "analyze",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Infer the probable root cause per cluster and rank by service impact and severity; classify against P1 thresholds (>1000 customers affected, >$100k/hour revenue exposure, >3 critical services down, or expected duration >30 min — any one triggers P1 per ITIL/ISO 20000-1 § 7.10.1)",
        "position": {
          "x": 0,
          "y": 600
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "medium",
        "tools": [
          "rca-engine",
          "service-impact-map"
        ]
      },
      {
        "agent": null,
        "confidential": false,
        "gate": null,
        "gateway": "exclusive",
        "human": null,
        "id": "disp",
        "interrupt_before": false,
        "kind": "gateway",
        "label": "Cluster disposition: routine incident, candidate P1 outage, or non-actionable noise?",
        "position": {
          "x": 0,
          "y": 720
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "gateway",
        "tools": []
      },
      {
        "agent": "drafter",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "ticket",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Open a standard incident ticket for the routine actionable cluster with root cause and runbook",
        "position": {
          "x": 0,
          "y": 840
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "servicenow",
          "runbook-kb"
        ]
      },
      {
        "agent": "drafter",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "draft_p1",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Draft the P1 incident record with root cause, affected services and recommended major-outage disposition",
        "position": {
          "x": 0,
          "y": 960
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "servicenow",
          "runbook-kb"
        ]
      },
      {
        "agent": null,
        "confidential": false,
        "gate": "gate:p1-outage-declaration",
        "gateway": null,
        "human": "NOC shift lead (incident commander)",
        "id": "p1_gate",
        "interrupt_before": true,
        "kind": "gate",
        "label": "A NOC engineer signs the P1 / major-outage declaration that starts SLA clocks, exec comms and regulatory outage reporting",
        "position": {
          "x": 0,
          "y": 1080
        },
        "reversible": false,
        "sla": null,
        "sla_spec": null,
        "tier": "high",
        "tools": []
      },
      {
        "agent": "drafter",
        "confidential": true,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "check_regulatory_trigger",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Evaluate whether the declared incident meets regulatory reporting thresholds and record the determination: FCC 47 CFR § 64.2011 (>100 customers for >30 min, or any public-safety / 911 impact → report within 30 hours); CRTC (>500 customers for >2 hours → within 24 hours); Ofcom (>100 customers or national impact → immediately). Flag in ServiceNow; queue regulatory notification if any threshold is met.",
        "position": {
          "x": 0,
          "y": 1200
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "servicenow",
          "regulatory-reporting-config"
        ]
      },
      {
        "agent": "declare",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "declare",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Open the declared incident, page on-call and trigger the outage-comms and regulatory-reporting workflow",
        "position": {
          "x": 0,
          "y": 1320
        },
        "reversible": false,
        "sla": null,
        "sla_spec": null,
        "tier": "high",
        "tools": [
          "servicenow",
          "pagerduty"
        ]
      },
      {
        "agent": "validator",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "validate_suppress_rule",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Simulate the proposed suppression rule against historical alarm patterns to verify it will not false-negative real incidents (over-suppress); reject if false-negative rate exceeds 2% (3GPP TS 32.111-3 correlation rule validation)",
        "position": {
          "x": 0,
          "y": 1440
        },
        "reversible": true,
        "sla": "max 5 min runtime",
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "aiops-correlation",
          "historical-alarm-db"
        ]
      },
      {
        "agent": null,
        "confidential": false,
        "gate": "gate:cluster-suppression-signoff",
        "gateway": null,
        "human": "NOC engineer (fault management)",
        "id": "supp_gate",
        "interrupt_before": true,
        "kind": "gate",
        "label": "A NOC engineer signs off before the cluster is auto-closed or suppressed as non-actionable",
        "position": {
          "x": 0,
          "y": 1560
        },
        "reversible": false,
        "sla": null,
        "sla_spec": null,
        "tier": "high",
        "tools": []
      },
      {
        "agent": "suppressor",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "suppress",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Auto-close and suppress the approved non-actionable clusters and write the suppression rule",
        "position": {
          "x": 0,
          "y": 1680
        },
        "reversible": false,
        "sla": null,
        "sla_spec": null,
        "tier": "high",
        "tools": [
          "aiops-correlation",
          "servicenow"
        ]
      },
      {
        "agent": "monitor",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "monitor",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Track MTTR and SLA clocks on open incidents, feed correlation accuracy back, and log the audit trail",
        "position": {
          "x": 0,
          "y": 1800
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "servicenow",
          "sla-dashboard"
        ]
      },
      {
        "agent": "escalator",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "escalate_sla_breach",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Escalate incident to management and command centre; notify VP Network Operations and page incident commander via PagerDuty and Slack when a P1 SLA threshold is breached (per ISO 20000-1 § 7.10.5 escalation policy)",
        "position": {
          "x": 0,
          "y": 1920
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "medium",
        "tools": [
          "pagerduty",
          "servicenow",
          "slack"
        ]
      },
      {
        "agent": null,
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "__end__",
        "interrupt_before": false,
        "kind": "terminal",
        "label": "Done",
        "position": {
          "x": 0,
          "y": 2040
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "terminal",
        "tools": []
      }
    ]
  },
  "hash": "da774af94a7d825bb71fcdc6bcb47eaedb71d4b7027f42ee6d3164a41efc85ac",
  "name": "Network alarm correlation autopilot",
  "slug": "alarm-noise-suppression",
  "source": "example",
  "version": null,
  "violations": []
}