Flag onsite incident items for analysts before reports

Your incident items arrive without onsite flags, causing skewed delay metrics and missed SLA alerts. Analysts get consistent flags so reporting is accurate before the next reporting run.