01Triage
Determine whether there is immediate danger, an active payment, compromised credentials, impersonation, malicious content, or a threat to another institution. Direct the reporter to the affected institution and appropriate authorities without delaying urgent protective action.
02Preserve and contain
Preserve the report and relevant technical records, restrict malicious content or access when authorized, notify affected internal owners, and avoid altering original evidence. Never instruct a person to move money into a “safe” account.
03Investigate with limits
Use verified records and least-privilege access. Ardyn signals may prioritize review but may not make an unreviewable accusation or final decision. Separate confirmed facts, indicators, hypotheses, and unresolved questions.
04Notify and learn
Give clear next steps, make legally required notifications if future obligations apply, document outcomes, and update controls. Sacred currently has no accounts or payment rails and no agent authorized to collect funds.