Live workspace. Durable storage schema active — live connectors, billing, and AI automation are activation-gated.View Activation Status
Signed out
Sign in as the approved QA user before running RLS-bound QA.
Sign in
Back to control matrix
Read-only automation evaluation - no live writes

AI usage & billing anomaly detection

Detect unexpected AI service usage, billing spikes, and quota anomalies in near real time.

Cloud/API Guard
CAG-4
cloud api

Readiness evaluation

Partial
critical
Automation rationale
Deterministic explanation from evidence, gaps, and open findings.
Critical open finding affects this control.
Required evidence
Evidence types expected for this control.
log export
scan result
Linked evidence
Sample evidence mapped to this control.

AI provider usage log (sample)

Synthetic AI usage/billing series used for anomaly demo. No real provider contacted.

Collected

Confidence: medium · Owner: Alex Doe

Linked findings
Open or historical findings mapped to this control.
critical
In triage

AI billing spike anomaly

Investigate the source of the spend increase and confirm it is authorized.

Recommended remediation workflow
Preview recommendation only; no workflow instance is created here.

Investigate AI billing spike

Triage an anomalous increase in AI provider spend or usage. SLA 8h.

Open workflow template
Audit trail placeholder
Future live audit trails will show reviewer decisions, evidence refreshes, and workflow transitions.
Catalog imported: Cloud/API Guard
Last evaluated: May 29, 2026
Mode: local deterministic preview