Observability Agent Runs

Threshold Tuning Protocol

• Collect at least 10 task observations before adjusting any hook threshold.
• Adjust only one threshold at a time.
• Record the before/after threshold and the observation that prompted the change.
• If a hook produces more than 2 false positives in 10 runs, widen its threshold or downgrade it from deny to warn.
• If a hook misses more than 1 real problem in 10 runs, tighten its pattern or threshold.

Output Format

• Run summary: task type, outcome, hooks fired.
• Anomalies: false positives or false negatives with description.
• Threshold recommendation: if tuning is warranted, state current value, proposed value, and rationale.