احتواء التهديد يحتاج إلى قرار. لا إلى تنبيه فقط.

pip install pushary

import os
from pushary import PusharyServer

px = PusharyServer(api_key=os.environ["PUSHARY_API_KEY"])

def contain(alert, action):
    # Enrichment and evidence collection never wait for anyone.
    context = enrich(alert)

    if action.reversible and context.confidence > 0.95:
        return apply(action)

    decision = px.decisions.ask(
        external_id=alert.duty_analyst_id,
        type="confirm",
        question=(
            f"{action.summary} on {action.target}? "
            f"Confidence {context.confidence:.0%}. Impact: {action.user_impact}."
        ),
    )

    if not decision["approved"]:
        return annotate(alert, "containment not authorized")
    return apply(action)