kai/recipes/15_security_threat_scoring/request.json

{
  "model": "kai",
  "state": {
    "source_ip": "45.154.255.82",
    "requests_per_sec": 85,
    "unique_api_keys_attempted": 14,
    "failed_auth_percentage": 92.8
  },
  "questions": {
    "threat_severity": {
      "type": "score",
      "instructions": "Score threat level",
      "criteria": [
        "normal traffic",
        "minor rate spike",
        "likely automated scraper",
        "active credential stuffing attack"
      ]
    },
    "mitigation": {
      "type": "choice",
      "instructions": "Recommended firewall response",
      "criteria": {
        "throttle": "apply 1 req/sec rate limit",
        "challenge": "issue Cloudflare challenge",
        "drop": "drop packets at edge firewall"
      }
    }
  }
}