Context Documents

[
  {
    "uuid": "cd-abc123-...",
    "title": "Identity Incident Response Runbook",
    "doc_type": "runbook",
    "targeting_rules": {
      "match_any": [
        { "field": "source_name", "operator": "eq", "value": "sentinel" }
      ]
    },
    "content": "## Scope\nThis runbook covers all identity-related security incidents..."
  }
]

{
  "uuid": "cd-abc123-...",
  "title": "Identity Incident Response Runbook",
  "doc_type": "runbook",
  "content": "## Scope\nThis runbook covers all identity-related security incidents.\n\n## Escalation\n1. Notify #security-incidents Slack channel\n2. Page on-call security engineer if severity >= High\n3. Engage legal if data exposure suspected\n\n## Remediation Steps\n...",
  "targeting_rules": {
    "match_any": [
      { "field": "source_name", "operator": "eq", "value": "sentinel" }
    ],
    "match_all": [
      { "field": "severity", "operator": "in", "values": ["High", "Critical"] }
    ]
  }
}