This prompt is designed for verification system architects and platform engineers who need to move from informal, tribal-knowledge escalation rules to a structured, testable, and machine-readable criteria specification. The core job-to-be-done is producing a document that a routing engine can execute: a set of conditions, thresholds, and logical rules that determine whether a claim proceeds to auto-verification, gets flagged for human review, or is escalated as high-risk. The ideal user is someone who already has production logs, example claims, and a clear understanding of their operational cost and latency budgets. They are not starting from scratch; they are formalizing existing intuition into a specification that can be version-controlled, tested against historical data, and deployed as part of a verification pipeline.
Prompt
Escalation Criteria Definition Prompt Template

When to Use This Prompt
Define the exact job, the required inputs, and the operational boundaries for the Escalation Criteria Definition Prompt.
You should use this prompt when you have concrete examples of both routine and edge-case claims, and you need to eliminate ambiguity in your triage logic. The prompt requires several structured inputs to be effective: a set of [CLAIM_EXAMPLES] that represent your production distribution, your known [FAILURE_MODES] (e.g., false negatives on numerical claims, over-escalation of domain-specific jargon), your [OPERATIONAL_CONSTRAINTS] (e.g., human review capacity, latency budget, cost per auto-verification), and a target [OUTPUT_SCHEMA] for the criteria. Do not use this prompt if you lack production data to validate the output; generating criteria in a vacuum will produce a specification that looks plausible but fails on real traffic. This prompt is also not a substitute for a routing implementation—it defines the what, not the how of execution.
The primary constraint is that the generated criteria must be executable and non-contradictory. A common failure mode is producing rules that overlap in ways that create dead zones (claims that match no rule) or conflict zones (claims that match multiple rules with different outcomes). The harness must test for these conditions by running the criteria against a golden dataset of claims with known correct escalation outcomes. Additionally, the criteria must handle edge cases explicitly: claims with missing evidence, claims in domains where your knowledge base is weak, and claims that are syntactically simple but semantically high-risk. The next step after generating the criteria is to run them through a regression test suite that includes adversarial examples designed to probe rule boundaries, and to log any criteria violations found in production for iterative refinement.
Use Case Fit
Where the Escalation Criteria Definition Prompt Template delivers value and where it introduces risk. Use these cards to decide if this prompt fits your verification pipeline architecture before you invest in implementation.
Good Fit: Greenfield Verification Pipeline Design
Use when: You are architecting a new verification system and need to define escalation rules before writing routing code. Guardrail: Generate criteria specifications as structured JSON that can be directly consumed by a rules engine, not just prose documents that require manual translation into code.
Bad Fit: Real-Time Routing Decisions
Avoid when: You need a prompt that makes live escalation decisions on individual claims during production traffic. This template defines criteria, not executes them. Guardrail: Pair this prompt with the Verification Triage Decision Prompt Template for runtime routing. Use this output as the policy input to that operational prompt.
Required Inputs: Production Logs and Historical Escalations
Risk: Criteria generated without real escalation examples will miss edge cases that actually occur in production. Guardrail: Feed this prompt a sample of 50-100 historical escalation decisions, including both correct escalations and missed escalations, so generated criteria cover known failure patterns.
Operational Risk: Non-Contradictory Criteria Validation
Risk: Generated criteria may contain logical conflicts where a claim matches both auto-verify and escalate conditions simultaneously. Guardrail: Run the output through a contradiction detection harness that tests criteria against a synthetic claim set designed to expose overlapping or conflicting rules before deployment.
Operational Risk: Threshold Drift Over Time
Risk: Escalation criteria defined once will decay as claim patterns, evidence sources, and business risk tolerances change. Guardrail: Version the criteria specification alongside the prompt template and schedule quarterly reviews triggered by changes in human reviewer feedback patterns or auto-verification error rates.
Bad Fit: Single-Reviewer Workflows Without Triage
Avoid when: Your verification pipeline has only one human reviewer with no routing logic. Criteria definition adds overhead without a multi-path routing system to consume it. Guardrail: Implement basic triage routing first using the Auto-Verify vs Human Review Routing Prompt, then return to this template when you need formalized, auditable escalation rules.
Copy-Ready Prompt Template
A reusable prompt for generating a structured, executable escalation criteria specification from system requirements and production logs.
This prompt template is designed for verification system architects who need to define and document the exact rules for when a claim should be escalated for human review. It takes your system's constraints, risk tolerances, and historical data as input and produces a structured specification that can be directly translated into application logic. The output is not just a list of rules; it includes conditions, thresholds, illustrative examples, and edge cases to ensure the criteria are executable and non-contradictory.
textYou are an expert verification system architect. Your task is to produce a structured, executable escalation criteria specification based on the provided inputs. The specification must be unambiguous, testable, and cover known edge cases. ## INPUTS - System Requirements: [SYSTEM_REQUIREMENTS] - Risk Tolerance Policy: [RISK_TOLERANCE_POLICY] - Production Logs (Anonymized Escalation Scenarios): [PRODUCTION_LOGS] - Domain Context: [DOMAIN_CONTEXT] ## OUTPUT SCHEMA Generate a JSON object with the following structure: { "escalation_rules": [ { "rule_id": "string", "rule_name": "string", "condition": "string (a precise, testable logical expression)", "thresholds": { "metric_name": "value" }, "escalation_reason": "string (explains the risk or policy violated)", "priority": "string (CRITICAL | HIGH | MEDIUM | LOW)", "example_scenario": "string (a concrete example from the logs that triggers this rule)", "edge_case_handling": "string (how to handle borderline or ambiguous inputs)" } ], "global_thresholds": { "auto_verify_confidence_min": "number", "human_review_confidence_max": "number", "max_auto_verification_latency_ms": "number" }, "contradiction_checks": [ "string (a statement describing a potential conflict between rules and how it is resolved)" ], "unresolved_scenarios": [ "string (a scenario from the logs that cannot be fully resolved by the current rules and requires further definition)" ] } ## CONSTRAINTS - Every rule must be directly traceable to a system requirement or a pattern in the production logs. - Conditions must be written as testable logical expressions (e.g., 'claim.confidence_score < 0.8 AND claim.domain == "medical"'). - The contradiction_checks array must explicitly state how conflicting rules are prioritized. - If a scenario from the logs cannot be covered, it must be listed in unresolved_scenarios with a reason. - Do not invent rules that are not supported by the provided inputs.
To adapt this template, replace the square-bracket placeholders with your specific context. The [SYSTEM_REQUIREMENTS] should be a clear list of your verification pipeline's goals and non-goals. [PRODUCTION_LOGS] is critical; provide a representative sample of anonymized cases where the system succeeded, failed, or was uncertain. After generating the specification, the next step is to run it through a validation harness that tests each rule against the provided log scenarios to ensure the conditions are executable and the rules do not contradict each other. For high-stakes domains like healthcare or finance, a human expert must review the final specification before it is implemented in code.
Prompt Variables
Required inputs for the Escalation Criteria Definition Prompt Template. Each placeholder must be populated before the prompt is sent. Validation notes describe how to check input quality before execution.
| Placeholder | Purpose | Example | Validation Notes |
|---|---|---|---|
[VERIFICATION_DOMAIN] | Defines the subject area for escalation rules to ensure domain-appropriate thresholds | financial_statement_claims | Must match a value from the approved domain taxonomy. Reject unknown domains before prompt execution. |
[ORGANIZATIONAL_POLICIES] | Provides policy constraints that override default escalation logic | Auto-verify only if evidence count >= 2 AND source authority >= 'high'. Escalate all claims involving regulatory filings. | Parse check: must contain at least one actionable rule. Null allowed if no org-specific policies exist. |
[RISK_TOLERANCE_LEVEL] | Sets the organization's acceptable risk threshold for auto-verification decisions | low | Must be one of: low, medium, high. Controls default confidence thresholds and sampling rates. |
[PRODUCTION_LOG_SAMPLES] | Provides real escalation cases from production logs for criteria calibration | [{"claim": "Revenue grew 30% YoY", "escalated": true, "reason": "numerical_claim_no_source"}] | Must be valid JSON array with at least 3 examples. Each example requires claim, escalated, and reason fields. |
[KNOWN_FAILURE_MODES] | Documents past triage failures to ensure criteria address known gaps | False negatives on statistical claims with partial evidence. Over-escalation of multi-source claims with minor inconsistencies. | Must contain at least one failure mode description. Null allowed for initial criteria definition. |
[REVIEWER_SKILL_MATRIX] | Maps available reviewer expertise to claim types for routing decisions | {"financial_analyst": ["revenue_claims", "statistical_claims"], "legal_reviewer": ["regulatory_claims"]} | Must be valid JSON mapping roles to claim type arrays. At least one role required. |
[SLA_DEADLINES] | Defines time constraints that affect escalation urgency and batch processing | {"high_risk": "1_hour", "medium_risk": "4_hours", "low_risk": "24_hours"} | Must be valid JSON with risk-to-deadline mapping. All three risk levels required. |
[AUTO_VERIFICATION_CAPABILITIES] | Describes what the current auto-verification system can reliably handle | Numerical claims with source data. Single-source factual claims from authoritative domains. Cannot handle multi-hop claims or cross-document contradictions. | Must list at least one capability and one limitation. Used to define auto-verify boundary conditions. |
Implementation Harness Notes
How to wire the Escalation Criteria Definition prompt into a production verification pipeline with validation, testing, and human review gates.
This prompt is not a one-off document generator; it is a specification compiler that must produce machine-executable rules. The harness should treat the generated criteria as code. After the model returns a structured criteria specification, the first integration step is a syntactic validation pass: parse the output schema, confirm that every condition has a defined threshold, verify that all escalation paths terminate in a concrete action (auto-verify, human review, or reject), and check for contradictory rules. A common failure mode is criteria that look plausible but contain unreachable branches—for example, a rule that escalates claims with confidence below 0.6 to human review while another rule auto-verifies all claims with confidence above 0.5, leaving no behavior for the 0.5–0.6 band. The harness must flag these gaps before the criteria enter production.
Testing against production logs is mandatory. Before deploying generated criteria, replay a representative sample of historical verification decisions through the new rules and compare routing outcomes. The harness should measure three signals: recall on known escalations (did the criteria catch claims that previously required human intervention?), false escalation rate (how many claims that were safely auto-verified now route to reviewers?), and coverage of edge cases (do the criteria explicitly handle the top 20 failure patterns from your incident log?). If the criteria miss known high-risk patterns—such as claims involving regulated domains, numerical assertions without source data, or quotes attributed to unnamed sources—reject the output and retry with those failure cases injected into the [EXAMPLES] placeholder. A single pass through the prompt is rarely sufficient; expect to iterate with production-derived counterexamples.
Human review of the criteria themselves is a hard gate, not optional. The generated specification should be surfaced in a review interface that lets verification operations leads inspect each rule, test it against sample claims, and approve or reject individual conditions. The harness must support partial approval: a reviewer might accept domain-specific escalation rules for financial claims but reject overly broad sensitivity triggers that would flood the queue. Log every approval decision with the reviewer identity, timestamp, and rule version. This audit trail is essential for governance reviews and for debugging when escalation behavior changes after a criteria update. Never auto-apply generated criteria without human sign-off—the cost of a misrouted high-risk claim far exceeds the latency of a review cycle.
Model choice and fallback matter here. Use a model with strong reasoning and structured output discipline (GPT-4o, Claude 3.5 Sonnet, or equivalent) for the primary generation. If the primary model produces criteria that fail syntactic validation twice, fall back to a simpler template-based criteria generator with hardcoded safety overrides, then flag for manual authoring. The harness should also version every generated criteria set alongside the prompt template, input parameters, and production log sample used for testing. When escalation behavior drifts—and it will—this version history lets you trace whether the change came from a prompt edit, a model update, or a shift in claim patterns. Wire criteria deployment through the same CI/CD pipeline you use for service configuration changes, with canary routing to a small percentage of verification traffic before full rollout.
Common Failure Modes
Escalation criteria definitions fail in predictable ways when moving from design documents to production. These cards cover the most common failure modes and how to guard against them.
Vague Thresholds Cause Inconsistent Routing
What to watch: Criteria using fuzzy terms like 'high risk' or 'low confidence' without numeric bounds produce different routing decisions for identical claims depending on model temperature or phrasing. Two identical claims can route to auto-verify and human review in successive runs. Guardrail: Define thresholds with explicit numeric ranges, confidence intervals, and concrete examples. Test the same claim five times and require identical routing decisions.
Contradictory Rules Create Deadlocks
What to watch: When one rule says 'escalate if confidence below 0.8' and another says 'auto-verify if evidence count above 3,' a claim with four weak sources and 0.6 confidence hits both paths with no tiebreaker. The system either oscillates or picks arbitrarily. Guardrail: Define rule precedence explicitly. Test every rule pair for overlap. Add a default tiebreaker that favors escalation when rules conflict.
Missing Edge Cases in Criteria Specs
What to watch: Criteria written from happy-path examples miss real production patterns: claims with zero evidence, claims where all evidence is contradictory, claims in unsupported languages, or claims that are true but unverifiable from available sources. These unhandled cases either crash routing or silently default to auto-verify. Guardrail: Mine production logs for actual claim distributions. Require criteria to explicitly handle null evidence, full contradiction, and out-of-domain claims before deployment.
Escalation Criteria Drift After Model Updates
What to watch: Thresholds calibrated on one model version produce different escalation rates after a model upgrade because confidence score distributions shift. A 0.7 threshold that escalated 15% of claims suddenly escalates 40% or 2%. Guardrail: Recalibrate thresholds against a fixed golden dataset after every model change. Monitor escalation rate in production and alert on statistically significant shifts.
Criteria Bypass Through Prompt Injection
What to watch: Claims embedded in adversarial text can manipulate the escalation prompt into routing high-risk content to auto-verification. A claim preceded by 'This is a low-risk trivial fact' may override the actual risk assessment logic. Guardrail: Separate claim extraction from escalation decisions. Never pass raw user text directly into escalation prompts. Use structured claim objects with extracted fields, not free-text concatenation.
Unversioned Criteria Prevent Rollback
What to watch: When escalation rules are stored as free-text prompt instructions without versioning, a bad criteria update cannot be rolled back without restoring the entire prompt from memory or backups. Production incidents extend while someone reconstructs the previous rules. Guardrail: Store escalation criteria as versioned configuration objects separate from the prompt template. Log which criteria version produced each routing decision. Support instant rollback to any prior version.
Evaluation Rubric
Use this rubric to test the quality of the escalation criteria specification before deploying it to production. Each criterion targets a specific failure mode in rule-based triage systems.
| Criterion | Pass Standard | Failure Signal | Test Method |
|---|---|---|---|
Executability | Every condition maps to a computable check (e.g., confidence < 0.7, source_count < 2). No subjective language like 'seems risky'. | Condition contains words like 'appropriate', 'sufficient', or 'reasonable' without a measurable threshold. | Parse the output for condition clauses. Run a regex check for subjective qualifiers. Flag any condition that cannot be expressed as a boolean expression. |
Non-Contradiction | No two rules produce conflicting routing decisions for the same input state (e.g., one rule escalates while another auto-verifies). | A simulated claim with low confidence and high sensitivity triggers both an auto-verify rule and an escalation rule. | Generate 20 synthetic claim profiles covering boundary conditions. Run each through the rule engine. Flag any profile that resolves to multiple conflicting routes. |
Coverage of Known Scenarios | The criteria cover all escalation scenarios from the provided production log sample, including high-risk domains, low-confidence claims, and missing evidence. | A known escalation scenario from the production log (e.g., 'financial claim with single uncorroborated source') does not match any defined escalation condition. | Run the criteria against a golden dataset of 50 historical escalation cases. Measure recall. Pass requires recall >= 0.98 on the golden set. |
Threshold Justification | Every numeric threshold (confidence, source count, recency) includes a documented rationale or calibration reference. | A threshold like 'confidence < 0.8' appears with no explanation of why 0.8 was chosen over 0.7 or 0.9. | Scan the output for numeric thresholds. For each, check for an adjacent explanation string or a reference to a calibration run. Flag any orphaned threshold. |
Edge Case Handling | The specification defines behavior for boundary values (e.g., confidence exactly 0.7, source count exactly 2) using explicit operators (>=, <=, >, <). | A condition uses 'confidence below 0.7' without specifying whether 0.7 itself is included or excluded. | Parse all comparison operators. Flag any use of natural language comparators ('below', 'above', 'more than') without a corresponding mathematical operator definition. |
Domain-Specific Rules | The criteria include distinct escalation paths for at least the domains specified in the input context (e.g., legal, financial, medical). | All claims route through the same generic escalation logic regardless of domain. | Classify the escalation rules by domain tag. Require at least one unique condition or threshold per domain listed in the input [DOMAIN_CONSTRAINTS]. |
Reviewer Instruction Clarity | Escalated claims include a structured handoff packet with the specific question for the reviewer, not just a raw claim dump. | The escalation output contains the claim text but no explicit reviewer question or evidence summary. | Validate the escalation output against the [OUTPUT_SCHEMA]. Require non-null values for 'reviewer_question' and 'evidence_summary' fields in all escalated records. |
Over-Escalation Guard | The criteria include a maximum escalation rate threshold or a cost-aware gating condition to prevent routing all claims to human review. | In a batch simulation of 100 low-risk claims, more than 50% are escalated to human review. | Run a batch simulation with 100 synthetic low-risk, high-confidence claims. Measure the escalation rate. Pass requires escalation rate <= 20% for this low-risk batch. |
Enabling Efficiency, Speed & Accuracy
Intelligent Analysis, Decision & Execution
We build AI systems for teams that need search across company data, workflow automation across tools, or AI features inside products and internal software.
Talk to Us
Search across company data
Give teams answers from docs, tickets, runbooks, and product data with sources and permissions.
Useful when people spend too long searching or get different answers from different systems.

Automate internal workflows
Use AI to route work, draft outputs, trigger actions, and keep approvals and logs in place.
Useful when repetitive work moves across multiple tools and teams.

Add AI to products and internal tools
Build assistants, guided actions, or decision support into the software your team or customers already use.
Useful when AI needs to be part of the product, not a separate tool.
Adapt This Prompt
How to adapt
Start with the base prompt template and a small set of 5-10 known escalation scenarios from production logs. Replace [ESCALATION_CATEGORIES] with a flat list of 3-5 categories (e.g., 'high_risk', 'low_confidence', 'policy_violation'). Use [CONDITIONS] as simple threshold rules: 'if confidence < 0.7 then escalate'. Skip the [EDGE_CASES] section initially—add it after you observe failures. Run the prompt against historical triage decisions and compare outputs manually.
Watch for
- Overly broad conditions that escalate everything (e.g., 'escalate if anything is uncertain')
- Missing negation handling: 'do NOT escalate when...' rules are harder to get right
- Criteria that contradict each other when combined (e.g., 'escalate low confidence' vs 'auto-verify if evidence count > 3')
- No test for the 'do nothing' path—verify that some claims correctly route to auto-verification

About the author
Prasad Kumkar
CEO & MD, Inference Systems
Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.
His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.
Partnered with leading AI, data, and software stack.
How We Work
Custom AI workflows for your Business
One-fit-all AI don't work for modern businesses. At Inferensys, we aim to understand your business & custom requirements; which we use to define most efficient agentic workflows, the data, and the tools for your business.
01
Review the use case
We understand the task, the users, and where AI can actually help.
Read more02
Pick the right approach
We define what needs search, automation, or product integration.
Read more03
Build the first useful version
We implement the part that proves the value first.
Read more04
Improve from there
We add the checks and visibility needed to keep it useful.
Read moreThe first call is a practical review of your use case and the right next step.
Talk to Us