Why event lifecycle design matters
Without a lifecycle, detections become disconnected alerts with no governance.

Lifecycle states
- Detected
- Validated
- Enriched
- Escalated
- Resolved
- Reported
Benefits
- Consistent response playbooks
- Clear ownership
- Better data quality for analytics
Safety and security events use the same lifecycle, with review made explicit rather than optional. Detect Suspicious Behaviour with AI Vision walks through a queue where every event is Manual Review Required.


