Fraud red flags triage: prioritize investigations and evidence

Triage the following fraud red flags and propose next steps.

Inputs:
- Red flags observed: {red_flags}
- Process context: {process_context}
- Available data sources: {available_data_sources}
- Constraints (time/legal/privacy): {constraints}

Output:
1) Prioritized list of red flags (High/Med/Low) with rationale.
2) Investigation plan: specific tests, data needed, and who to involve (legal, HR, IT).
3) Evidence preservation steps (chain of custody basics).
4) Communication guidance (what to document, who to notify).
5) “Stop/Go” decision points.

Stay within professional/ethical boundaries; do not advise illegal actions.