WORKSPACE

Risk & Alert Center

VTRUE LENS · ALERT COORDINATION

Risk & Alert Center

A system-level alert coordination layer: it gathers anomaly signals from many modules, classifies, prioritizes, assigns owners, tracks SLA and routes to the right handling module. This is not a pure audit log.

What's urgent?Why was the alert created?Which module handles it?
Direct priority94% confidence

Suspicious scan cluster — HCMC D6

Duplicate codes, one hardware fingerprint, a 2 km radius. VTrue Lens suggests opening an investigation case before locking stamps or alerting consumers.

SignalClassificationTrust OpsInvestigation
!
Open cases
2
1 critical
Being handled in Verification & Investigation.
W
Watching
3
confidence < 0.85
Signal not strong enough to open a case.
RI
Composite risk index
38/100
+6 pts
Alert health score — driver: duplicate codes.
9
24h alerts
9
merged into 2 cases
New alerts classified in 24h.
FP
False alert
6%
-2 pts
Used to improve the detection model.
SLA
Response time
41min
-18%
From alert to owner acknowledged.
TRIAGE BOARD

Alert triage

signal → alert → owner → handling moduleAdmin audit log →

12 alerts · click a row for VTrue Lens details

PriorityAlertSourceObjectReason & confidenceOwner / receiving moduleSuggested actionStatus
Critical
Suspicious scan cluster — HCMC D6
ALT-2026-0412
VerificationLOT DEMO-B-1111 · PV-B1-L2-00001…41214 codes scanned 412× across 9 devices sharing one hardware profile — relabeling pattern
94%
In progress
High
Repeated-code signal — batch DEMO-B-1111
ALT-2026-0408
IdentityPrint segment S2 · DEMO-B-1111Duplicate rate 3.1× baseline, isolated to one print segment — supply-side leak
92%
Case created
High
Unactivated token scanned — PV-HA-L1 range
ALT-2026-0399
ActivationSerial PV-HA-L1-00821 · Airfryer XXLToken still in Reserved status but 47 consumer scans recorded
88%
Classified
Medium
Campaign ROI below floor — Mega Sale
ALT-2026-0388
LoyaltyCampaign CMP-MEGA-2026-Q2ROI 0.7× vs 2.0× floor — 71% audience has no verified-scan history
83%
Awaiting approval
Medium
Point hold anomaly — case INV-482
ALT-2026-0375
LoyaltyReward hold · 12,400 pts lockedHold duration 18 days exceeds policy window — budget still committed
79%
Marketing OpsAdmin
In progress
Medium
Low SKU coverage — Serum N°4, Mekong
ALT-2026-0362
IdentitySKU SER-N4 · Mekong region54% coverage against +22% verified-scan demand — transfer in flight
85%
Watching
Medium
Overstock — Vital-C, Hanoi DC
ALT-2026-0350
ReportsSKU VIT-C-500 · Hanoi DC34 days on hand vs 14-day target — $61K locked cash
81%
Classified
Medium
Approver MFA gap — dual-sign role
ALT-2026-0341
AdminUser N. Hùng · Channel ManagerGrandfathered approver account without MFA on high-impact role
91%
SecurityAdmin
New
Medium
Integration sync failures — POS API
ALT-2026-0330
DataConnector POS-API-NORTH · 3 dealers14 consecutive sync failures in 6 hours — inventory drift risk
86%
In progress
Opportunity
High margin, thin distribution — BioMask × HCMC
ALT-2026-0318
ReportsSKU BIO-MASK · District 158% margin SKU — only 12 stocked outlets in highest scan-density district
78%
Watching
Medium
Region mismatch — recall lot still scanning
ALT-2026-0295
VerificationLOT-2026-05 · 246 post-recall scansRecalled lot still generating scans in HCM and Da Nang
90%
Awaiting approval
Medium
Warehouse audit pattern — benign match
ALT-2026-0280
VerificationStore audit · Cần Thơ DCBulk scan pattern matched inventory audit schedule — confirmed benign
72%
False alert
RISK SIGNAL LOG

Risk signal log

raw input · no conclusion · no execution
SIG-2412
Verificationduplicate_scan · PV-B1-L2-00001...412

Code scanned 412× within a 2 km radius.

Triaged94%
SIG-2399
Activateunactivated_scan · PV-HA-L1-00821

Unactivated stamp but 47 scans already recorded.

New88%
SIG-2362
Identitylow_sku_coverage · SKU SER-N4 · Mekong

54% coverage against +22% scan demand.

Watching85%
WATCHLIST

Watchlist

3 signals
Low SKU coverage — Serum N4 MekongChannel Ops · Auto-close when coverage >= 75%

Operational signal, no need to open an investigation case.

Integration retry spike — CRM syncData Ops · 24h watch

Waiting for enough samples to tell a data error from an integration error.

User report spike — D6 retailersTrust Ops · Escalate if +30%

User reports to cross-check with the scan cluster.

ALERT DECISION LOG

Alert handling log

decision & coordination — audit referenced only when neededFull audit in Admin →
2026-06-11 08:45
Classified alert · ALT-2026-0412
Suspicious scan cluster — HCMC D6 · VTrue Lens · NewIn progress
Duplicate burst + hardware fingerprint match
Verification & Investigation
2026-06-11 09:02
Case created · ALT-2026-0412
Suspicious scan cluster — HCMC D6 · T. Minh · Trust Ops · In progressCase created
CASE DEMO-VT-1111Verification & InvestigationRelated audit · AUD-2026-44102
2026-06-10 23:10
Assigned owner · ALT-2026-0408
Repeated-code signal — batch DEMO-B-1111 · VTrue Lens
Supply-side leak pattern — Trust Ops
Verification & Investigation
2026-06-10 15:00
Sent to Approval Center · ALT-2026-0388
Campaign ROI below floor — Mega Sale · L. Trang · Marketing Ops · ClassifiedAwaiting approval
REQ-LOY-2026-0882AdminRelated audit · AUD-2026-44088
2026-06-04 19:00
Marked false alert · ALT-2026-0280
Warehouse audit pattern — benign match · T. Minh · Trust Ops · WatchingFalse alert
Confirmed inventory audit — improves model baseline
2026-06-08 10:00
Added to watchlist · ALT-2026-0362
Low SKU coverage — Serum N°4, Mekong · VTrue Lens
Transfer booked — auto-close when coverage ≥ 75%