{
  "format": "minctrl.process/v1",
  "graph": {
    "edges": [
      {
        "id": "e0___start____intake",
        "source": "__start__",
        "target": "intake"
      },
      {
        "id": "e1_intake__score",
        "source": "intake",
        "target": "score"
      },
      {
        "id": "e2_score__risk",
        "source": "score",
        "target": "risk"
      },
      {
        "id": "e3_risk__autoclear",
        "label": "low risk AND secure auth (47 CFR 64.2010) satisfied",
        "source": "risk",
        "target": "autoclear"
      },
      {
        "id": "e4_risk__locked",
        "label": "account locked / port-freeze set",
        "source": "risk",
        "target": "locked"
      },
      {
        "id": "e5_risk__stage",
        "label": "elevated / high risk",
        "source": "risk",
        "target": "stage"
      },
      {
        "id": "e6_locked__signoff",
        "source": "locked",
        "target": "signoff"
      },
      {
        "id": "e7_stage__signoff",
        "source": "stage",
        "target": "signoff"
      },
      {
        "id": "e8_signoff__execute",
        "label": "approved",
        "source": "signoff",
        "target": "execute"
      },
      {
        "id": "e9_autoclear__monitor",
        "source": "autoclear",
        "target": "monitor"
      },
      {
        "id": "e10_execute__monitor",
        "source": "execute",
        "target": "monitor"
      },
      {
        "id": "e11_signoff__monitor",
        "label": "denied",
        "source": "signoff",
        "target": "monitor"
      },
      {
        "id": "e12_monitor____end__",
        "source": "monitor",
        "target": "__end__"
      }
    ],
    "nodes": [
      {
        "agent": null,
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "__start__",
        "interrupt_before": false,
        "kind": "terminal",
        "label": "Start",
        "position": {
          "x": 0,
          "y": 0
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "terminal",
        "tools": []
      },
      {
        "agent": "intake",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "intake",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Ingest the SIM-change / port-out / account-takeover request and pull subscriber, line and device-of-record context from OSS/BSS",
        "position": {
          "x": 0,
          "y": 120
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "amdocs",
          "oss-inventory",
          "netcracker"
        ]
      },
      {
        "agent": "analyzer",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "score",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Score the attempt on behavioral, device, network and identity signals (SIM/device churn, port-velocity, geo/IP anomaly, IDV) and check for a customer-set account-lock / port-freeze, then classify risk",
        "position": {
          "x": 0,
          "y": 240
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "medium",
        "tools": [
          "behavioral-biometrics",
          "device-intel",
          "idv-vendor",
          "fraud-scoring-model"
        ]
      },
      {
        "agent": null,
        "confidential": false,
        "gate": null,
        "gateway": "exclusive",
        "human": null,
        "id": "risk",
        "interrupt_before": false,
        "kind": "gateway",
        "label": "Fraud risk?",
        "position": {
          "x": 0,
          "y": 360
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "gateway",
        "tools": []
      },
      {
        "agent": "reconciler",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "autoclear",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Low risk: auto-clear only after §64.2010 secure authentication passes, against policy with a full authentication trail and fire the FCC notification — a reversible, in-policy change",
        "position": {
          "x": 0,
          "y": 480
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "case-mgmt",
          "policy-engine",
          "notification-gateway"
        ]
      },
      {
        "agent": "verifier",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "stage",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Elevated risk: stage the case, force enhanced verification, fire the FCC notification and freeze the line pending review; handle failed/repeated authentication per the §64.2010 failed-auth procedure (lockout/escalate)",
        "position": {
          "x": 0,
          "y": 600
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "medium",
        "tools": [
          "idv-vendor",
          "fraud-scoring-model",
          "notification-gateway",
          "servicenow"
        ]
      },
      {
        "agent": "verifier",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "locked",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Account is locked / port-frozen by the customer (47 CFR 64.2010 + 52.37): hard-hold the request, fire the FCC notification, and route to signoff for an authenticated step-up / in-person override — never auto-clear",
        "position": {
          "x": 0,
          "y": 720
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "medium",
        "tools": [
          "policy-engine",
          "idv-vendor",
          "notification-gateway",
          "case-mgmt"
        ]
      },
      {
        "agent": null,
        "confidential": false,
        "gate": "gate:number-release-signoff",
        "gateway": null,
        "human": "Certified fraud-defense analyst (number-release authority)",
        "id": "signoff",
        "interrupt_before": true,
        "kind": "gate",
        "label": "A certified fraud analyst confirms identity on the flagged account and signs (or denies) the irreversible number-release / port-out with the authentication trail",
        "position": {
          "x": 0,
          "y": 840
        },
        "reversible": false,
        "sla": null,
        "sla_spec": null,
        "tier": "high",
        "tools": []
      },
      {
        "agent": "submit",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "execute",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Execute the approved SIM swap or port-out: provision the new SIM / release the number to the gaining carrier",
        "position": {
          "x": 0,
          "y": 960
        },
        "reversible": false,
        "sla": null,
        "sla_spec": null,
        "tier": "high",
        "tools": [
          "oss-inventory",
          "amdocs",
          "npac-port"
        ]
      },
      {
        "agent": "monitor",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "monitor",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Monitor the number for post-change abuse, log dispositions for the FCC audit trail, and route confirmed fraud to recovery and chargeback",
        "position": {
          "x": 0,
          "y": 1080
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "case-mgmt",
          "fraud-scoring-model",
          "servicenow"
        ]
      },
      {
        "agent": null,
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "__end__",
        "interrupt_before": false,
        "kind": "terminal",
        "label": "Done",
        "position": {
          "x": 0,
          "y": 1200
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "terminal",
        "tools": []
      }
    ]
  },
  "hash": "1c10ec104667a565147008519200c73504081ec8fb8011ecd5bcbfae89400e37",
  "name": "SIM-swap / port-out fraud-defense autopilot",
  "slug": "sim-swap-fraud-defense",
  "source": "example",
  "version": null,
  "violations": []
}