“Reports security threat with concerning details (attack attempt, manifesto); clinical language moderates alarm but incident inherently negative.”