Assess whether the incident is contained or still lateral (e3c3e1)
August 31, 2026
SITUATION A board meeting in 36 hours that will ask if we are down put AI-model API key found in a public gist in front of detection-engineering manager in a bank's SWIFT-adjacent environment. This Cybersecurity / Third-Party and AI Security decision is the incident is contained from AI-model API key found in a public gist, and the live options are The incident is contained, Still lateral.
DECISION Detection-engineering manager in a bank's SWIFT-adjacent environment must choose The incident is contained / Still lateral using AI-model API key found in a public gist after a board meeting in 36 hours that will ask if we are down.
HYPOTHESES TO TEST 1. AI-model API key found in a public gist reads as The incident is contained once a board meeting in 36 hours that will ask if we are down is maps to the same Cybersecurity population. 2. AI-model API key found in a public gist is closer to Still lateral after a board meeting in 36 hours that will ask if we are down; The incident is contained would over-claim this Third-Party and AI Security extract. 3. A dual reading is still live in AI-model API key found in a public gist for detection-engineering manager in a bank's SWIFT-adjacent environment. 4. AI-model API key found in a public gist is missing the fact detection-engineering manager needs after a board meeting in 36 hours that will ask if we are down; stop this Cybersecurity close.
ANALYSIS REQUIRED 1. Test whether access is still live, already rotated, or only written as closed. 2. Check SIEM or identity logs in AI-model API key found in a public gist for reuse after a board meeting in 36 hours that will ask if we are down. 3. Separate a scoped exception from an unbounded exposure a bank's SWIFT-adjacent environment has not measured. 4. For this Cybersecurity Third-Party and AI Security file, read AI-model API key found in a public gist against a board meeting in 36 hours that will ask if we are down and write the one fact that would move the incident is contained for detection-engineering manager.
RECOMMENDATION Choose The incident is contained / Still lateral on this Cybersecurity / Third-Party and AI Security packet (AI-model API key found in a public gist after a board meeting in 36 hours that will ask if we are down). If AI-model API key found in a public gist cannot force a Cybersecurity label under Third-Party and AI Security, stop. Do not invent missing evidence a bank's SWIFT-adjacent environment does not have.
COMMAND RETURNS - Bottom-line Cybersecurity option on the incident is contained, then the evidence in AI-model API key found in a public gist, then the action for detection-engineering manager - Hypothesis scorecard against AI-model API key found in a public gist: supported / rejected / untestable - Third-Party and AI Security finding in AI-model API key found in a public gist that a second reviewer can re-perform - Missing page in AI-model API key found in a public gist after a board meeting in 36 hours that will ask if we are down, if any
Explore more
More Cybersecurity prompts
- Assess whether the incident is contained or still lateral (e3923b)
- Assess whether cyber insurance notice is due today (51da59)
- Assess whether legal hold and forensics must precede reboot (8275fc)
- Assess whether to pay, restore, or rebuild from known-good (94e2af)
- Assess whether executives must notify customers this cycle (28b0d2)
Explore related decision areas
See governed multi-model AI on your own prompt
Compare GPT-5, Claude, and Gemini side by side, with human review and a decision record built in.

