[
  {
    "playbook_id": "PB-SAI-001",
    "name": "Shadow AI Auto-Quarantine",
    "trigger_domain": "SAI",
    "trigger_condition": {
      "control_id": "SAI-4",
      "condition_expression": "unregistered_endpoint_detected == true AND classification_confidence >= 0.8",
      "confidence_threshold": 0.8
    },
    "human_in_the_loop": {
      "required": false,
      "blast_radius_threshold_users": 10,
      "financial_impact_threshold_usd": 10000
    },
    "steps": [
      {
        "step_order": 1,
        "action": "alert_soc",
        "control_ref": "SAI-5",
        "max_duration_seconds": 300
      },
      {
        "step_order": 2,
        "action": "isolate",
        "control_ref": "SAI-4",
        "max_duration_seconds": 900
      },
      {
        "step_order": 3,
        "action": "log_evidence",
        "control_ref": "SEV-CLS",
        "max_duration_seconds": 60
      }
    ],
    "severity_classification_ref": "shadow_ai_exposure"
  },
  {
    "playbook_id": "PB-MSR-001",
    "name": "Machine-Speed Agentic Containment",
    "trigger_domain": "MSR",
    "trigger_condition": {
      "control_id": "MSR-3",
      "condition_expression": "ensemble_agreement >= 0.7 AND signal_count >= 3",
      "confidence_threshold": 0.85
    },
    "human_in_the_loop": {
      "required": true,
      "blast_radius_threshold_users": 10,
      "financial_impact_threshold_usd": 10000
    },
    "steps": [
      {
        "step_order": 1,
        "action": "rate_limit",
        "control_ref": "MSR-1",
        "max_duration_seconds": 2
      },
      {
        "step_order": 2,
        "action": "isolate",
        "control_ref": "MSR-3",
        "max_duration_seconds": 2
      },
      {
        "step_order": 3,
        "action": "escalate_human",
        "control_ref": "MSR-4",
        "max_duration_seconds": 60
      },
      {
        "step_order": 4,
        "action": "log_evidence",
        "control_ref": "SEV-RPT",
        "max_duration_seconds": 60
      }
    ],
    "severity_classification_ref": "agentic_runaway"
  },
  {
    "playbook_id": "PB-MEX-001",
    "name": "Model Extraction Response",
    "trigger_domain": "MEX",
    "trigger_condition": {
      "control_id": "MEX-1",
      "condition_expression": "output_divergence_score >= 0.6 AND query_pattern_anomalous == true",
      "confidence_threshold": 0.75
    },
    "human_in_the_loop": {
      "required": false,
      "blast_radius_threshold_users": 0,
      "financial_impact_threshold_usd": 0
    },
    "steps": [
      {
        "step_order": 1,
        "action": "rate_limit",
        "control_ref": "MEX-2",
        "max_duration_seconds": 30
      },
      {
        "step_order": 2,
        "action": "revoke_token",
        "control_ref": "MEX-3",
        "max_duration_seconds": 60
      },
      {
        "step_order": 3,
        "action": "log_evidence",
        "control_ref": "SEV-CLS",
        "max_duration_seconds": 60
      }
    ],
    "severity_classification_ref": "model_extraction"
  },
  {
    "playbook_id": "PB-APA-001",
    "name": "Agentic Permission Overreach Response",
    "trigger_domain": "APA",
    "trigger_condition": {
      "control_id": "APA-1",
      "condition_expression": "permission_scope_exceeded == true",
      "confidence_threshold": 0.9
    },
    "human_in_the_loop": {
      "required": true,
      "blast_radius_threshold_users": 10,
      "financial_impact_threshold_usd": 10000
    },
    "steps": [
      {
        "step_order": 1,
        "action": "revoke_token",
        "control_ref": "APA-3",
        "max_duration_seconds": 10
      },
      {
        "step_order": 2,
        "action": "escalate_human",
        "control_ref": "APA-4",
        "max_duration_seconds": 60
      },
      {
        "step_order": 3,
        "action": "log_evidence",
        "control_ref": "SEV-CLS",
        "max_duration_seconds": 60
      }
    ],
    "severity_classification_ref": "credential_overreach"
  },
  {
    "playbook_id": "PB-APT-001",
    "name": "Agentic Threat Detection Response",
    "trigger_domain": "APT",
    "trigger_condition": {
      "control_id": "APT-1",
      "condition_expression": "prompt_injection_score >= 0.9 OR tool_abuse_detected == true OR memory_poisoning_detected == true",
      "confidence_threshold": 0.9
    },
    "human_in_the_loop": {
      "required": false,
      "blast_radius_threshold_users": 10,
      "financial_impact_threshold_usd": 10000
    },
    "steps": [
      {
        "step_order": 1,
        "action": "isolate",
        "control_ref": "APT-1",
        "max_duration_seconds": 5
      },
      {
        "step_order": 2,
        "action": "quarantine",
        "control_ref": "APT-3",
        "max_duration_seconds": 60
      },
      {
        "step_order": 3,
        "action": "alert_soc",
        "control_ref": "APT-2",
        "max_duration_seconds": 60
      },
      {
        "step_order": 4,
        "action": "log_evidence",
        "control_ref": "SEV-RPT",
        "max_duration_seconds": 60
      }
    ],
    "severity_classification_ref": "prompt_injection"
  },
  {
    "playbook_id": "PB-MLC-001",
    "name": "Compromised Model Rollback",
    "trigger_domain": "MMD",
    "trigger_condition": {
      "control_id": "MLC-2",
      "condition_expression": "model_compromise_confirmed == true OR drift_threshold_breached == true",
      "confidence_threshold": 0.85
    },
    "human_in_the_loop": {
      "required": true,
      "blast_radius_threshold_users": 10,
      "financial_impact_threshold_usd": 10000
    },
    "steps": [
      {
        "step_order": 1,
        "action": "escalate_human",
        "control_ref": "MLC-4",
        "max_duration_seconds": 120
      },
      {
        "step_order": 2,
        "action": "rollback_model",
        "control_ref": "MLC-2",
        "max_duration_seconds": 900
      },
      {
        "step_order": 3,
        "action": "notify_regulator",
        "control_ref": "SEV-RPT",
        "max_duration_seconds": 3600
      },
      {
        "step_order": 4,
        "action": "log_evidence",
        "control_ref": "MLC-5",
        "max_duration_seconds": 60
      }
    ],
    "severity_classification_ref": "model_drift"
  },
  {
    "playbook_id": "PB-MMD-001",
    "name": "Model Merge Backdoor Response",
    "trigger_domain": "MMD",
    "trigger_condition": {
      "control_id": "MMD-2",
      "condition_expression": "backdoor_signature_detected == true",
      "confidence_threshold": 0.8
    },
    "human_in_the_loop": {
      "required": true,
      "blast_radius_threshold_users": 0,
      "financial_impact_threshold_usd": 0
    },
    "steps": [
      {
        "step_order": 1,
        "action": "quarantine",
        "control_ref": "MMD-3",
        "max_duration_seconds": 60
      },
      {
        "step_order": 2,
        "action": "escalate_human",
        "control_ref": "MMD-1",
        "max_duration_seconds": 300
      },
      {
        "step_order": 3,
        "action": "log_evidence",
        "control_ref": "SEV-CLS",
        "max_duration_seconds": 60
      }
    ],
    "severity_classification_ref": "supply_chain_compromise"
  },
  {
    "playbook_id": "PB-PHY-001",
    "name": "Physical AI Safety Failsafe",
    "trigger_domain": "MSR",
    "trigger_condition": {
      "control_id": "PHY-3",
      "condition_expression": "physical_process_anomaly == true",
      "confidence_threshold": 0.95
    },
    "human_in_the_loop": {
      "required": true,
      "blast_radius_threshold_users": 0,
      "financial_impact_threshold_usd": 10000
    },
    "steps": [
      {
        "step_order": 1,
        "action": "isolate",
        "control_ref": "PHY-1",
        "max_duration_seconds": 1
      },
      {
        "step_order": 2,
        "action": "escalate_human",
        "control_ref": "PHY-3",
        "max_duration_seconds": 5
      },
      {
        "step_order": 3,
        "action": "notify_regulator",
        "control_ref": "SEV-RPT",
        "max_duration_seconds": 3600
      },
      {
        "step_order": 4,
        "action": "log_evidence",
        "control_ref": "PHY-2",
        "max_duration_seconds": 60
      }
    ],
    "severity_classification_ref": "physical_safety_failure"
  }
]