# Triage: states, priority and duplicates

**Updated:** 2026-10-04

## The states, and what they mean

- **New** — received, not yet looked at.
- **Triaged** — reproduced and rated.
- **Accepted** — a real issue you intend to fix.
- **Resolved** — fixed.
- **Duplicate** — the same issue as an earlier report.
- **Informative** — true, but not eligible for a reward.
- **Not applicable** — could not be reproduced, or is not a vulnerability.
- **Out of scope** — outside what the program covers.

**Informative** and **Not applicable** are separate on purpose. One means the reporter was right and you are not paying; the other means they were wrong. Recording a valid report as a mistake is unfair to somebody who helped you.
## Priority is a judgment, not a formula

Priority is P1 to P5 and it is what the reward table keys on. It is yours to set and yours to change, with a reason. A CVSS vector can be recorded alongside it, but the two are different things: one is a technical rating, the other is your decision about what to pay.
## Duplicates are suggested, never automatic

Reports that describe the same kind of issue on the same shape of address are surfaced as suggestions when you open a report. Marking one as a duplicate is always a person’s decision, because a duplicate decision is a decision not to pay, and an automatic one is a decision nobody reviewed.
## Always give a reason

The reason you type is sent to the reporter with the decision. A downgrade or a rejection with no explanation is the thing researchers appeal.


---
[← Back to TotalCtrl Help Center](https://help.totalctrl.app/en-US/)