Observability

9 pipeline stage spans with timing, verdict, score. gRPC export to Jaeger. GDPR-safe: no raw content on spans.

Full metric singletons: SHADOW_BAN_TOTAL, SHADOW_BAN_COST_SAVED_USD, P99 latency, bypass rate, corpus drift.

Pre-built SLO dashboards. Alerts: P99 latency, 5xx rate, availability, shadow ban rate, corpus drift.

Full pipeline trace visualization. 9 spans per request. Span attributes: stage, verdict, score (GDPR-safe).

Structured log shipping via Promtail. Integrated with Grafana for log-metric correlation.

Per-request deep dive: verdict, risk score, stage timing, causal chain. Full audit trail with request ID.

HTTP/SSL/DNS/TCP checks. TimescaleDB hypertable + continuous aggregates. 90-day retention. PagerDuty webhooks.

IBM 2024 breach cost benchmarks × industry multiplier × blocked events. ASCII ROI report + PDF export.

WebSocket-based push of XAI anomaly events and incident alerts directly to the SOC dashboard and other observability surfaces. Eliminates polling — latency drops to near-zero. Backed by FastAPI WebSocket endpoint + Redis Pub/Sub fan-out. Client auto-reconnects on disconnect.

React Native mobile application (iOS + Android) with real-time push notifications for HIGH and BLOCK security verdicts. SOC operators receive instant alerts on-the-go with verdict details, risk score, causal stage, and a one-tap link to the full XAI report. Powered by FCM/APNs via the SOVA alerting pipeline.

Single Grafana dashboard consolidating metrics from all 11 Docker Compose services: proxy, warden, app, analytics, dashboard, postgres, redis, prometheus, grafana, minio, minio-init. Panels cover CPU/memory per container, request rates, error budgets, and storage utilisation.