Runbook Coverage by Alert
The loudest 12 of 47 rules, for a fictional freight visibility platform, Thornbury Logistics.
| Alert rule | Sev | Pages | Night | Verified | Expr changed | State |
|---|---|---|---|---|---|---|
| ApiLatencyP99Breach | Sev2 | 31 | 9 | 2026-07-14 | 2026-05-02 | Covered |
| CarrierApiTimeouts | Sev2 | 27 | 11 | 2025-11-08 | 2026-06-19 | Stale |
| ManifestParseFailureRate | Sev2 | 24 | 13 | none | 2026-04-27 | Uncovered |
| CheckoutErrorRateHigh | Sev1 | 22 | 6 | 2026-08-03 | 2026-02-11 | Covered |
| EdiPartnerFeedStale | Sev2 | 21 | 12 | none | 2026-01-30 | Uncovered |
| RateLimitRejections | Sev3 | 19 | 6 | 2025-09-22 | 2026-03-14 | Stale |
| PaymentWebhookBacklog | Sev2 | 18 | 4 | 2026-06-28 | 2026-01-09 | Covered |
| ShipmentEventDuplication | Sev2 | 17 | 9 | none | 2026-05-21 | Uncovered |
| KafkaPartitionUnderReplicated | Sev2 | 15 | 8 | 2025-10-17 | 2026-07-02 | Stale |
| WarehouseApiCircuitOpen | Sev2 | 14 | 8 | none | 2026-02-24 | Uncovered |
| TenantIsolationCheckFailed | Sev1 | 6 | 3 | none | 2026-07-15 | Uncovered |
| AuditLogWriteFailure | Sev1 | 5 | 2 | none | 2026-05-04 | Uncovered |
CarrierApiTimeouts is the pattern that hides: the runbook is linked, so every alert index counts it. Its timeout threshold moved from 5s to 1.5s nine months after the runbook was last verified, and it now fires on ordinary peak-hour latency while the document still opens by asking whether the carrier is down.