Build the AI triage submission for a host and return it without sending it: the system instruction, the JSON document describing the host, and the question, exactly as a triage submission for the host would send them now.

The document is assembled against the host's previous verdict and the configured max_payload_kb, unless a different budget is given. Nothing is sent to the AI provider, queued or recorded, and the checks that decide whether a host is submitted at all are not applied: a host with no alerting artifacts, an excluded host, or a host whose verdict is still current returns the document it would have been sent. AI triage does not need to be enabled.