Route unapproved device enrollments to security on-call before SLA

Your device enrollment events arrive uncategorized, causing gaps in asset ownership and delayed incident triage. Security engineers get owner-verified tickets and chat alerts so suspicious enrollments are resolved before outreach SLAs lapse.