[
    {
        "label": "Create an order risk based on IP Address",
        "trigger_type": [
            "order_created"
        ],
        "object_type": "order",
        "app_id": "triggers",
        "settings": {
            "priority": 0,
            "condition_groups": {
                "1": {
                    "conditions": {
                        "1": {
                            "field": "order.client_details.browser_ip",
                            "settings": {
                                "operator": "equals_one",
                                "value": "",
                                "long_value": "123.456.789.000\r\n1:5ee:bad:c0de",
                                "token_object_type": "order",
                                "condition_type": "AND"
                            },
                            "weight": 999
                        }
                    },
                    "actions": {
                        "1": {
                            "type": "order_create_risk",
                            "settings": {
                                "token_object_type": "order",
                                "recommendation": "cancel",
                                "message": "Order from known bad IP Address {{ order.client_details.browser_ip }}",
                                "source": "External",
                                "wait": "0",
                                "cw_timezone": "Africa\/Nairobi",
                                "custom_wait": "",
                                "run_once": 0
                            },
                            "weight": 999,
                            "target_key": "order"
                        }
                    }
                }
            },
            "shared_workflow_id": 316526
        },
        "description": "Automatically create an order risk by checking for known IP addresses then flagging suspicious orders for manual review and cancellation."
    }
]