- AnomalyDetector initialized and running in main() with periodic updates - Anomaly events pushed to dashboard WS feed as 'alert' messages - GET /api/anomalies?since=24h lists recent anomaly events - POST /api/security/arm + /api/security/disarm endpoints - GET /api/security/status returns armed, learning_until, anomaly_count_24h - Arm/disarm state persists via learning_state SQLite table Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| anomaly.go | ||
| anomaly_test.go | ||
| flow.go | ||
| flow_test.go | ||
| handler.go | ||
| patterns.go | ||
| patterns_test.go | ||