Customer used words indicating strong emotional distress (anger, despair, "I've had enough") - Ticket mentions legal action, regulatory filing, or formal complaint - Customer has contacted about the same issue 3+ times in 30 days - Enterprise customer (top 20% by ARR) with any complaint - Upcoming r