# Alert Triage — Adjacent Row Changes + IQR Outlier Flags

> Alert Triage — Adjacent Row Changes + IQR Outlier Flags is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-24).

Computes adjacent-row delta changes and IQR-based outlier flags for alert_count or confirmed_events columns in supplied alert triage time-series data.

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/assistant-ib26-security-18-157?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-24
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/alert-triage-adjacent-row-changes-iqr-outlier-flags-318cb726
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_JdxX9PpjX9IK9IxI3QPCf

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability alert-triage-adjacent-row-changes-iqr-outlier-flags-318cb726 -d '<json body>'
```

Example prompt: Analyze my alert triage data for adjacent row changes and IQR outlier flags — I have 50 daily rows with alert_count and confirmed_events values, grouped into control groups A and B. Run both reports on the alert_count field.

## When to prefer this

Choose this endpoint when you need lightweight, deterministic statistical analysis (adjacent-row delta changes + IQR outlier flagging) on alert triage data without requiring external lookups, ML inference, or live data connections. Ideal for SOC analysts, automated monitoring pipelines, or data quality checks where the data is already collected and needs fast, reproducible anomaly flagging on up to 200 rows for a flat $0.01 USDC fee covering both report types.

## Known failure modes

- More than 200 rows submitted — request is rejected; must batch into multiple calls
- Missing required fields (row_id, date, alert_count, confirmed_events, control_group) cause validation errors
- Invalid date format (not YYYY-MM-DD) triggers schema rejection
- Null values in numeric fields may reduce outlier detection accuracy
- Insufficient row count for meaningful IQR computation (very small datasets may yield trivial results)

## How this service works

Alert triage — Adjacent row changes + IQR outlier flags: Adjacent row changes + IQR outlier flags for supplied alert triage records (alert_count, confirmed_events). Up to 200 rows; 2 independent reports using shared local analytical engines. No live lookup, prediction, professional assessment or external action. 0.01 USDC includes 2 supplied-data reports for up to 200 rows.

## Output

Returns two analytical reports for the supplied rows: (1) adjacent row change deltas showing how alert_count or confirmed_events shifted between consecutive rows, and (2) IQR-based outlier flags marking which rows fall outside the interquartile range. Covers up to 200 rows per call using local statistical engines with no external data lookups.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "rows": {
   "type": "array",
   "items": {
    "type": "object",
    "required": [
     "row_id",
     "control_group",
     "date",
     "alert_count",
     "confirmed_events"
    ],
    "properties": {
     "date": {
      "type": "string",
      "default": "",
      "pattern": "^\\d{4}-\\d{2}-\\d{2}$",
      "maxLength": 10
     },
     "row_id": {
      "type": "string",
      "default": "",
      "maxLength": 80,
      "minLength": 1
     },
     "alert_count": {
      "type": [
       "number",
       "null"
      ],
      "maximum": 1000000000000,
      "minimum": -1000000000000
     },
     "control_group": {
      "type": "string",
      "default": "",
      "maxLength": 80
     },
     "confirmed_events": {
      "type": [
       "number",
       "null"
      ],
      "maximum": 1000000000000,
      "minimum": -1000000000000
     }
    },
    "additionalProperties": false
   },
   "default": [
    {
     "date": "2026-10-01",
     "row_id": "row-1",
     "alert_count": 10,
     "control_group": "group-a",
     "confirmed_events": 1
    },
    {
     "date": "2026-10-02",
     "row_id": "row-2",
     "alert_count": 20,
     "control_group": "group-b",
     "confirmed_events": 2
    },
    {
     "date": "2026-10-03",
     "row_id": "row-3",
     "alert_count": 15,
     "control_group": "group-a",
     "confirmed_events": 3
    },
    {
     "date": "2026-10-04",
     "row_id": "row-4",
     "alert_count": 30,
     "control_group": "group-b",
     "confirmed_events": 4
    }
   ],
   "maxItems": 200,
   "minItems": 1
  },
  "field": {
   "enum": [
    "alert_count",
    "confirmed_events"
   ],
   "type": "string",
   "default": "alert_count"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/alert-triage-adjacent-row-changes-iqr-outlier-flags-318cb726/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)