SUMMARY: An escalation threshold defines when a watch item becomes an action item.
Routine administration produces many watch items. Some can remain in the ledger. Some need cleanup. Some need a stronger response because volume, risk, repetition, or uncertainty has crossed a line. The threshold prevents operators from waiting too long or acting too early.
A useful threshold is visible before the next incident, not invented during it.
Threshold Inputs
Volume: counts or rates that exceed normal background movement.
Risk: exposure, abuse, breakage, or trust damage if the signal is ignored.
Repetition: recurrence that turns cleanup into signal debt.
Confidence: evidence strong enough to justify action without overreaching.
Where to Use It
Use escalation thresholds with review ledgers. The ledger remembers the recurring item. The threshold decides when memory must become motion.
Operator Rule
Define the line before pressure makes the line emotional.
Field assessment: escalation works best when it is boring, documented, and already agreed.