Forcepoint DLP REST API v1, 4 commands: list incidents, get incident, update incident (status/severity/assignee). Token auth, stdlib-only. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>