Every incident in OutflowGuard has a status that indicates where it is in the verification workflow.
Initial status when a bank change is detected. Payment should be held until verification is complete.
The bank change has been confirmed as legitimate by a team member. For single-approval workflows, this means the incident can be unlocked.
For dual-approval workflows: A second team member has confirmed the verification. The incident can now be unlocked.
Verification is complete and payments can proceed. This status expires after 24 hours for security.
The bank change has been identified as suspicious or a false positive. The incident is closed.
The incident has been escalated to a senior authority (CFO, Security Team, etc.) for review.
An unlocked incident automatically expires 24 hours after being unlocked, requiring re-verification if needed.
The incident has been fully resolved and requires no further action.
Typical workflow: Paused → Verified → (Approved) → Unlocked → Expired/Closed
Alternative flow: Paused → Rejected or Paused → Escalated
