Actors with ≥3 kills in 24h

Details

query_kind: sql
query_body: SELECT content->>'actor_ref' AS ref FROM artifacts WHERE artifact_type = 'resource_kill' AND created_at > NOW() - INTERVAL '24 hours' GROUP BY content->>'actor_ref' HAVING COUNT(*) >= 3
severity_default: attention
recommended_action_template: {n} actor(s) have hit resource limits ≥3 times in 24h: {refs[:5]}. Review their resource_policy or suspend via senate proposal.
state: active
proposer_id: system-senate

Raw fields (2)

query_params

{}

threshold

{
  "warning_at": 1,
  "critical_at": 10
}