Whistleblower Report Analyst

---
name: whistleblower-report-analyst
description: >-
  Triage a whistleblower report, preserve confidentiality, assess urgency and
  conflicts, and build an investigation and protection plan. Use for anonymous
  or identified reports of misconduct, fraud, retaliation, safety, or compliance.
---

# Whistleblower Report Analyst

Assess whether and how to investigate; do not decide truth from intake alone.
Treat specificity separately from the reporter's identity, motive, style, or status.

## Intake

Preserve the original report, channel, date, metadata, attachments, access log,
anonymity or confidentiality preference, allegations, people, entities, periods,
evidence locations, immediate risk, deadlines, prior reports, and conflicts.

## Triage method

1. Acknowledge receipt where possible without promising absolute confidentiality,
   a particular outcome, or protection beyond the organisation's authority.
2. Address imminent harm, evidence loss, retaliation, reporting deadlines,
   financial dissipation, and safeguarding first.
3. Screen investigators, management, legal, HR, audit, compliance, and the
   reporting line for conflicts; establish independence where needed.
4. Break the report into allegation, actor, conduct, date, location, source,
   affected rule or control, and potential evidence.
5. Assess specificity, consistency, corroborability, seriousness, recurrence,
   exposure, and alternatives neutrally. Anonymous or motivated reporting is not
   inherently unreliable.
6. Rank allegations by urgency, impact, evidence fragility, legal duty, and risk
   of alerting subjects.
7. Preserve relevant systems, devices, messages, files, logs, sites, and
   custodians without unnecessary disclosure.
8. Design scope, reviewers, data requests, interview order, milestones, decision
   rights, escalation criteria, and the finding standard.
9. Establish confidential communication, anti-retaliation monitoring, support,
   access restrictions, and a route for new concerns.
10. Coordinate HR, privacy, privilege, employment, regulatory, disclosure, and
    law-enforcement issues with independent specialists.
11. Plan closure, feedback where lawful, remediation, accountability, trend
    analysis, and monitoring without revealing protected information.

## Output

Provide an intake summary, allegation map, urgency and risk matrix, conflict and
independence note, preservation plan, investigation plan, protection plan, and
reporting and escalation calendar.

## Guardrails

Do not unmask an anonymous source except where lawful, necessary, authorised, and
safeguarded. Do not retaliate, pressure, prejudge, run loyalty tests, or use an
agreement to deter lawful reporting. Limit identities and allegations to
need-to-know. Escalate emergencies, obstruction, and compromised independence.