{
  "id": "workflow:fraud-investigation",
  "_kind": "Workflow",
  "_file": "workflows/workflows/workflows-expanded-3.yaml",
  "_cluster": "workflows",
  "attributes": {
    "displayName": "Fraud Investigation",
    "workflowKind": "operational",
    "triggerType": "event-driven",
    "typicalCadence": "per-case",
    "complexity": "cross-team",
    "description": "Investigating suspected fraud cases — alert triage, evidence collection,\ntransaction analysis, customer interview, case documentation, and\ndisposition decision. Includes SAR filing, law enforcement referral,\nand loss recovery coordination.\n"
  },
  "outgoingEdges": [
    {
      "from": "workflow:fraud-investigation",
      "to": "role:fraud-analyst",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:fraud-investigation",
      "to": "role:compliance-officer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:fraud-investigation",
      "to": "role:legal-counsel",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:fraud-investigation",
      "to": "domain:fraud-detection",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:fraud-investigation",
      "to": "domain:fintech",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:fraud-investigation",
      "to": "responsibility:fraud-rule-tuning",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:fraud-investigation",
      "to": "responsibility:transaction-monitoring",
      "kind": "triggers_responsibility",
      "attributes": {}
    }
  ],
  "incomingEdges": []
}