Live workspace. Durable storage schema active — live connectors, billing, and AI automation are activation-gated.View Activation Status
Signed out
Sign in as the approved QA user before running RLS-bound QA.
Sign in
Back to Findings
Read-only local preview. Status changes are kept in memory for this session only — no cloud write occurs.

AI billing spike anomaly

Source: cloud api guard

critical
In triage
Actions
Preview-only lifecycle transitions. Each action appends to the audit trail below.
Details

Sample AI provider spend increased 480% over the 7-day baseline within a 24-hour window.

Affected frameworks / controls

zagos-cloud-api-guard
CAG-4

Evidence summary

Synthetic usage series exceeded the anomaly threshold (see ev-007).

Recommendation

Investigate the source of the spend increase and confirm it is authorized.

Recommended remediation workflow

Investigate AI billing spike

Triage an anomalous increase in AI provider spend or usage. · SLA 8h

View workflow
Metadata
OwnerAlex Doe
Due dateMay 29, 2026
DetectedMay 27, 2026
Resolved-
Linked evidence
Evidence sharing a control with this finding.
EvidenceStatusOwnerAction
AI provider usage log (sample)
Collected
Alex DoeOpen
Audit trail
  • May 27, 2026 · system — detected
  • May 27, 2026 · Alex Doe — status_changed (open → in-triage)