topology-anomaly-detector 0.1.0

topology-anomaly-detector — extracted from SuperInstance oracle1-workspace

topology-anomaly-detector

Real-time anomaly detection on fleet coordination topology. Computes running TE, CSD, source counts, null multiplier against PLATO data and alerts on coordination failures.

Dependencies

coordination-topology (algorithm dependency)

Usage

python3 topology_anomaly_detector.py

Listens on port 8080 by default.

Anomaly Types Detected

Type	Threshold	What It Means
TE collapse	SI-TE < 0.1 bits	Coordination structure lost
TE spike	SI-TE > 5.0 bits	Suspicious surge in predictability
CSD anomaly		τ
Null multiplier spike	null_mult > 3.0	Structure far beyond random chance
Source burst	>2 new sources in 5 min	Fleet composition changing
TE shock	ΔTE > 0.5 in 30s	Coordination topology regime shift

Alerts

Publishes anomaly events to PLATO room topology-anomalies as tiles with:

• type: anomaly type string
• value: current metric value
• threshold: threshold exceeded
• sources: active sources at time of event
• confidence: statistical confidence (1 - p-value)

API

• GET /health — server status
• GET /anomalies — recent anomaly history
• GET /status — current coordination metrics

Shell Loading

from plato_shell_bridge import PlatoShell
shell = PlatoShell("agent-shell")
shell.load_tool("topology-anomaly-detector")

License

MIT — Part of the Cocapn Fleet Intelligence System