Pipeline KPIs

Where incident time goes: ingestion delay, per-stage durations, queue waits, AI triage, analyst decisions and closure. Median with p90; incidents counted by ingest time inside the window.