Portfolio / Workspaces / Incident Triage
N8N · IT OPERATIONS · RESPONSIBLE AI

AI-assisted incident triage with a safety baseline.

A portfolio workflow that validates sanitized incident data, recommends a category and priority, suggests safe initial actions and routes high-impact or low-confidence cases to human review.

AI-assisted IT incident triage workflow from webhook intake through a human review gate

Project evidence

Concrete artifacts recruiters and technical reviewers can inspect.

Importable workflows

A no-credential deterministic baseline plus an AI-enhanced n8n workflow that is explicitly marked as requiring setup.

Operational test cases

Sanitized P1-P4 cases cover identity, network, endpoint security, low-confidence input and prompt-injection resistance.

Architecture & setup

Trust boundaries, data contract, secret handling, failure behavior, human review and production-hardening steps.

Decision path

The external model enriches a controlled baseline; it does not own severity or remediation.

01 · IntakeSanitized webhook payload
02 · ValidateRequired fields and scope
03 · BaselineRules set a priority floor
04 · EnrichOptional constrained AI JSON
05 · ReviewHuman gate and response

Honest implementation boundaries

What is included, and what still requires real configuration.

Included and tested

  • Repository JSON validation
  • Deterministic classification tests
  • Priority floor and review logic
  • Sample payloads and acceptance criteria
  • No committed credentials or employer data

Setup required

The OpenAI credential must be selected in n8n. ServiceNow/Jira, Google Sheets, email and Teams/Slack are documented extension points only; they are not represented as live integrations.