Skip to content

1.0.0

Choose a tag to compare

@VamP08 VamP08 released this 04 Oct 14:52
· 84 commits to main since this release

First release.

  • Sources: log files (six Loghub datasets: OpenSSH, Apache, OpenStack, ZooKeeper, Linux,
    Blue Gene/L), GitHub issues, failed GitHub Actions runs and public status pages, all in one
    CloudEvents-shaped envelope with deterministic ids and per-source cursors.
  • Clustering before any model call: a fingerprint for structured alerts, Drain3 for log
    lines, MinHash LSH then MiniLM embeddings for prose. Cluster ids are content-addressed.
  • Triage: one structured verdict per cluster (category, severity, confidence) through a
    provider router; every verdict records the prompt version and the model that answered.
  • Gate: an ordered rule table decides auto, suggest, escalate or abstain; YAML routes send
    each decision to Jira, Slack or a person. Sink writes are idempotent.
  • Ask: /api/ask finds clusters by retrieval and answers counts and dates with SQL, with no
    model call.
  • Measured: Cohen's kappa 0.631 against labels set by the repositories' own maintainers
    (111 clusters); alert recall 1.00 against the operator labels in the BGL dataset; hit@1 0.80
    on 20 questions written before the retriever ran. Prompt 1.2 was measured and rejected.
  • Site: a static Astro site over the exported corpus (31,155 events in 905 clusters): the
    five outcomes, case pages, how it works, how it was measured, every cluster, and a live feed
    that triages new issues every six hours.

Known limitation: multi-line events such as kernel stack traces are ingested a line at a time.