[
  {
    "incident_class": "prompt_injection",
    "severity_level": 3,
    "severity_score": 6.8,
    "regulatory_trigger": true,
    "notification_routing": [
      {
        "jurisdiction": "EU",
        "regulator": "ENISA/National CSIRT",
        "notification_window_hours": 24
      },
      {
        "jurisdiction": "EU",
        "regulator": "EBA (if financial)",
        "notification_window_hours": 4
      }
    ]
  },
  {
    "incident_class": "model_extraction",
    "severity_level": 3,
    "severity_score": 6.2,
    "regulatory_trigger": false,
    "notification_routing": [
      {
        "jurisdiction": "EU",
        "regulator": "ENISA",
        "notification_window_hours": 72
      }
    ]
  },
  {
    "incident_class": "agentic_runaway",
    "severity_level": 4,
    "severity_score": 8.7,
    "regulatory_trigger": true,
    "notification_routing": [
      {
        "jurisdiction": "EU",
        "regulator": "EBA",
        "notification_window_hours": 4
      },
      {
        "jurisdiction": "EU",
        "regulator": "National CSIRT (NIS2)",
        "notification_window_hours": 24
      }
    ]
  },
  {
    "incident_class": "model_drift",
    "severity_level": 2,
    "severity_score": 4.1,
    "regulatory_trigger": false,
    "notification_routing": []
  },
  {
    "incident_class": "supply_chain_compromise",
    "severity_level": 4,
    "severity_score": 8.9,
    "regulatory_trigger": true,
    "notification_routing": [
      {
        "jurisdiction": "EU",
        "regulator": "National CSIRT (NIS2)",
        "notification_window_hours": 24
      },
      {
        "jurisdiction": "EU",
        "regulator": "EBA",
        "notification_window_hours": 4
      }
    ]
  },
  {
    "incident_class": "hallucination_high_stakes",
    "severity_level": 3,
    "severity_score": 6.5,
    "regulatory_trigger": true,
    "notification_routing": [
      {
        "jurisdiction": "EU",
        "regulator": "Market Surveillance Authority (EU AI Act Art. 73)",
        "notification_window_hours": 360
      }
    ]
  },
  {
    "incident_class": "federated_poisoning",
    "severity_level": 3,
    "severity_score": 7.0,
    "regulatory_trigger": true,
    "notification_routing": [
      {
        "jurisdiction": "EU",
        "regulator": "National DPA (GDPR)",
        "notification_window_hours": 72
      }
    ]
  },
  {
    "incident_class": "quantization_backdoor",
    "severity_level": 3,
    "severity_score": 6.6,
    "regulatory_trigger": true,
    "notification_routing": [
      {
        "jurisdiction": "EU",
        "regulator": "National CSIRT (NIS2)",
        "notification_window_hours": 24
      }
    ]
  },
  {
    "incident_class": "content_safety_violation",
    "severity_level": 2,
    "severity_score": 5.5,
    "regulatory_trigger": false,
    "notification_routing": [
      {
        "jurisdiction": "EU",
        "regulator": "Market Surveillance Authority",
        "notification_window_hours": 360
      }
    ]
  },
  {
    "incident_class": "physical_safety_failure",
    "severity_level": 4,
    "severity_score": 9.4,
    "regulatory_trigger": true,
    "notification_routing": [
      {
        "jurisdiction": "EU",
        "regulator": "National CSIRT (NIS2)",
        "notification_window_hours": 24
      },
      {
        "jurisdiction": "IN",
        "regulator": "NCIIPC",
        "notification_window_hours": 6
      }
    ]
  },
  {
    "incident_class": "shadow_ai_exposure",
    "severity_level": 2,
    "severity_score": 4.8,
    "regulatory_trigger": false,
    "notification_routing": []
  },
  {
    "incident_class": "credential_overreach",
    "severity_level": 3,
    "severity_score": 6.0,
    "regulatory_trigger": false,
    "notification_routing": [
      {
        "jurisdiction": "EU",
        "regulator": "National DPA (GDPR, if personal data)",
        "notification_window_hours": 72
      }
    ]
  }
]