Loss Prevention Case Lifecycle¶

Governs anomaly triage and investigation while preserving a clear distinction between evidence, intervention, and verified outcome.

Object: loss-prevention-case · States: 5 · Transitions: 4

State Diagram¶

flowchart LR

    %% ── classDef palette ─────────────────────────────────────
    classDef stInit  fill:#0d9488,stroke:#0f766e,color:#fff,font-weight:bold
    classDef stNorm  fill:#3b82f6,stroke:#2563eb,color:#fff
    classDef stOk    fill:#16a34a,stroke:#15803d,color:#fff,font-weight:bold
    classDef stFail  fill:#dc2626,stroke:#b91c1c,color:#fff,font-weight:bold
    classDef stHold  fill:#d97706,stroke:#b45309,color:#fff

    %% ── nodes ───────────────────────────────────────────────
    detected(["Detected"])
    triaged["Triaged"]
    investigated["Investigated"]
    resolved[["Resolved"]]
    false_positive[["False Positive"]]

    %% ── transitions ─────────────────────────────────
    detected -->|"loss-prevention-case-opened"| triaged
    triaged -->|"loss-prevention-case-opened"| investigated
    investigated -->|"loss-prevention-case-resolved"| resolved
    triaged -->|"loss-prevention-case-resolved"| false_positive

    %% ── class assignments ───────────────────────────
    class detected stInit
    class triaged,investigated stNorm
    class resolved,false_positive stOk

States¶

State	Label	Description	Initial	Terminal
`detected`	Detected	Anomaly evidence has been recorded but has not yet been triaged into a case.	✓
`triaged`	Triaged	Evidence has been assessed against the intervention policy.
`investigated`	Investigated	Authorised investigation is in progress with accountable ownership.
`resolved`	Resolved	Investigation outcome and any approved follow-up have been recorded.		✓
`false-positive`	False Positive	Evidence was determined not to warrant a loss-prevention outcome.		✓

Transitions¶

From	To	Trigger	Guards
`detected`	`triaged`	`loss-prevention-case-opened`	Evidence reference and applicable intervention policy are recorded.
`triaged`	`investigated`	`loss-prevention-case-opened`	An accountable investigator is assigned.
`investigated`	`resolved`	`loss-prevention-case-resolved`	Verified outcome and any approved follow-up are recorded.
`triaged`	`false-positive`	`loss-prevention-case-resolved`	False-positive rationale is recorded.