Service status

The live health route is authoritative; this page contains no fabricated event, relationship, or uptime totals.

Engine

Normalization and deterministic rules run statelessly for supplied observations.

The health receipt identifies the loaded ruleset and digest. Rule behavior is documented separately from ATT&CK interpretation.

Optional artifact persistence reports not configured or degraded honestly and does not block stateless correlation.