Skip to content

feat: add Utix anomaly detection report for volume, timing, and actor behavior - #303

Open
viktorlabs wants to merge 1 commit into
Parcel-Protocol:mainfrom
viktorlabs:fix/issue-179-utix-build-anomaly-detection-report-for-unusual
Open

viktorlabs wants to merge 1 commit into
Parcel-Protocol:mainfrom
viktorlabs:fix/issue-179-utix-build-anomaly-detection-report-for-unusual

Conversation

@viktorlabs

Copy link
Copy Markdown

Overview

This PR adds a read-only anomaly detection report for Utix that flags unusual volume, timing, actor repetition, and failed-operation patterns from fixture data, groups findings by severity and affected resource, and documents how maintainers should triage results while keeping false positives low.

Related Issue

Changes

📊 Anomaly Detection Report

  • [ADD] core/analytics/types.ts

    • Defines anomaly signal types for volume, timing, actor repetition, and failed operations.
    • Adds severity levels and affected-resource grouping used by the report output.
  • [ADD] core/analytics/index.ts

    • Implements the read-only report builder that evaluates fixture data against the defined signals.
    • Groups findings by severity and affected resource for maintainer triage.
  • [ADD] core/analytics/__tests__/aggregator.test.ts

    • Coverage for normal baseline, spike, repeated failure, and suspicious actor scenarios.
  • [ADD] docs/ANOMALY_DETECTION.md

    • Documents anomaly signals, report structure, triage guidance, and false-positive mitigation.
  • [MODIFY] README.md

    • Points contributors to the anomaly detection docs and validation command.

Verification Results

npm test -- core/analytics/__tests__/aggregator.test.ts
✅ normal baseline, spike, repeated failure, and suspicious actor scenarios covered
Acceptance Criteria Status
Report identifies anomalous patterns from fixture data ✅ Volume, timing, actor repetition, and failed-operation signals evaluated against fixtures
False-positive mitigation is documented ✅ Documented in docs/ANOMALY_DETECTION.md
Tests cover normal baseline, spike, repeated failure, and suspicious actor scenarios ✅ Covered in core/analytics/__tests__/aggregator.test.ts

Closes #179

@drips-wave

drips-wave Bot commented Oct 19, 2026

Copy link
Copy Markdown

@viktorlabs Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Utix: Build anomaly detection report for unusual volume, timing, and actor behavior

1 participant