triage

To match incident symptoms against known patterns and past TAC cases, the triage skill searches local pattern databases, retrieves Cortex documentation and closed TAC cases, and scores matches to determine if a Phase 2 confidence threshold is met.

Phase 2 triage confidence scoring is the process of correlating evidence during active CAPPY investigations to assess whether reported symptoms align with known patterns and documentation to meet a required confidence gate.

Yes, the triage skill works with Cortex documentation by retrieving relevant docs during investigations, and it utilizes MCP tools or native scripts to handle loop context and update investigation context files.

To update investigation context during CAPPY incident loop iterations, the triage skill refines symptom keywords, handles loop context, updates the inv_context.json file, and outputs a structured JSON gate assessment.

The best way to retrieve closed TAC cases for symptom correlation is using the triage skill, which searches prior TAC cases and pattern databases to quickly verify if reported symptoms align with known issues.

A symptom pattern match returns a low confidence score when the retrieved evidence from pattern databases, Cortex documentation, and prior TAC cases does not satisfy the Phase 2 gate confidence threshold.