Alert Rules

Define per-agent thresholds for the spend_usd_24h rolling spend and error_rate_pct failure metrics. Operators choose a comparison operator (>, ≥, <, ≤) and a severity tag that the breach bell surfaces.