Outlier detection

Monitors produce aggregate numbers over time: counts, rates, sums, and similar summaries per time window. Outlier detection flags unusual points—values that do not match the pattern of earlier monitor readings.

Conceptually:

1. A model of “normal” is inferred from past monitor values for that series—roughly, which values are common vs rare at a given moment (for example as a probability density over possible values).

2. Each new point is scored by how likely it would be under that historical picture. Unlikely points can drive alerts or review in the product.

The goal is to catch shifts and anomalies in monitor metrics after enough history exists to learn what “typical” means for your table.

Violations and stable baselines

If monitors count violations per window, outliers reflect changes in those counts—not a requirement that counts be zero. Stable high violation rates adapt as the baseline. See Monitors for how aggregates are produced.

Modeling runs on aggregates and artifacts in AIMO after the agent has supplied monitor time series. Raw rows stay on your side. For what the agent computes first, see Operations.