Documentation Index
Fetch the complete documentation index at: https://docs.truu.ai/llms.txt
Use this file to discover all available pages before exploring further.
Enforcement status tracks which responsive actions were taken from assessment workflows—especially the Quick Enforce panel in Predict—and whether they succeeded, are pending, or require follow-up.
Overview
TOTAL Enforce is the enforcement fabric built on risk assessment: signals from Predict and related surfaces drive available actions, and the platform records what ran and how it completed. That visibility complements open Investigations and supports accountability after closure.
Available Actions
Quick Enforce exposes a fixed set of actions (exact availability may depend on role and policy):
Self Police
User-facing nudge or self-remediation path where policy allows the subject to correct behavior or acknowledge policy without immediate IT lockout.
Lock Device
Remotely locks the subject device to contain risk until the investigation is cleared or another step is taken.
Escalate to HR
Routes the case into HR workflow per your integration—typically with context from the investigation and threat summary.
Escalate to Manager
Notifies or assigns the subject’s manager for awareness or local handling according to policy.
Restrict Access
Applies conditional or partial access limits (applications, resources, or sessions) short of a full device lock.
Emergency (911)
Initiates or surfaces an emergency escalation path your organization defines for imminent-harm scenarios. Use only in line with legal and corporate policy.
Action Statuses
Each action moves through states such as requested, in progress, completed, or failed (labels may vary by integration). Failed or stuck actions should be retried or handled manually per runbooks. Status appears in the enforcement UI tied to the user or investigation context.
Tracking Enforcement Outcomes
Tie enforcement records to the investigation ID and subject so reviewers can see what was attempted and final disposition alongside Investigations cards and past investigations. Outcome tracking supports reporting on time-to-enforce and effectiveness of each action type.
