“Uses urgent keywords like 'emergency' and 'diverted' to signal potential security threats without confirming harm.”