Auto-generated. This article is rebuilt from app/signals/config/alert_thresholds.json by scripts/build_alerts_kb.py. Edit the alert config and re-run the script — do not edit this file directly.

Stealth Risk Rising

Alert ID: STEALTH_RISK
Category: composite
Cross-detection: no

Severity

WARNING — conditions deteriorating; worth monitoring

Trigger condition

{
  "type": "and",
  "conditions": [
    {
      "field": "dix",
      "op": "lt",
      "value": 0.42
    },
    {
      "field": "pct_above_50sma",
      "op": "gt",
      "value": 50
    },
    {
      "field": "vix_close",
      "op": "lt",
      "value": 20
    }
  ]
}

All of the following must hold:

• dix < 0.42
• pct_above_50sma > 50
• vix_close < 20

Message template

Stealth risk: institutions pulling back (DIX {dix:.3f}) despite calm surface (VIX {vix_close:.1f}, breadth {pct_above_50sma:.0f}%).

Rendered with the current signals dict via Python str.format. Placeholders that fail to resolve fall back to the raw template (see _format_message in app/signals/alerts.py).

Cooldown / dedup

• Cooldown: none. Re-evaluation on every cycle.
• Dedup: at most one active (or acknowledged) row per alert_id at a time. Re-firing while active updates fired_at and the message but keeps the original first_fired_at.

Notifies

• Active alert feed (/api/v1/alerts/active, /alerts/summary).
• SSE stream (/api/v1/agents/stream) for real-time consumers.
• alert_fired webhook on first fire.
• alert_resolved webhook when the condition clears (non-cross-detection alerts only).

See also

• dix — /kb/dix
• Alert reference (legacy monolith)
• Live alerts feed