| Rule | State | Condition | Value | Threshold |
|---|---|---|---|---|
| AuditAIApiDown | inactive | up == 0 | 0.0000 | 0 |
| AuditAIDatabaseDown | inactive | db_up == 0 | — | 0 |
| AuditAIHighErrorRate | inactive | 5xx ratio > 2% over 5m | 0.0000 | 0.02 |
| AuditAISlowRequests | inactive | mean latency > 1s over 5m | — | 1 |
| AuditAIAuditWriteFailures | inactive | any audit-write failure in 10m | 0.0000 | 0 |
| AuditAIAuthFailureSpike | inactive | login 4xx > 0.5/s over 5m | 0.0000 | 0.5 |
| AuditAIModuleDisabledTooLong | inactive | modules_disabled > 0 for 60m | — | 0 |