def should_alert(incident): return incident["severity"] in ("high", "critical")