truss alert
Manage alerts — list, acknowledge, and create manual alerts for monitoring agent behavior.
Subcommands
truss alert list
List alerts.
| Option | Description |
|---|---|
-l, --limit <n> | Page size (default: 50) |
-p, --page <n> | Page number (default: 1) |
--unacknowledged | Show only unacknowledged alerts |
--json | Output as JSON |
truss alert list
truss alert list -l 100
truss alert list --unacknowledged
truss alert list --json
truss alert acknowledge <alert-id>
Mark an alert as acknowledged.
truss alert acknowledge alrt_abc123
truss alert create
Create a manual alert.
| Option | Description |
|---|---|
-t, --type <type> | (Required) Alert type |
-s, --severity <severity> | (Required) Severity level |
-m, --message <text> | (Required) Alert message |
--mandate-id <id> | Related mandate ID |
--action-record-id <id> | Related action record ID |
--channel <channel> | Notification channel: in_app, email, slack, pagerduty |
--channel-ref <ref> | Channel-specific reference (e.g. email address, Slack channel, PagerDuty service ID) |
Valid alert types:
| Type | Description |
|---|---|
mandate_expiring | Mandate is nearing expiration |
scope_violation | Agent action exceeded mandate scope |
jurisdiction_flag | Action crossed an unexpected jurisdiction boundary |
chain_breach | Evidence chain integrity violation |
delegation_depth_exceeded | Delegation chain exceeded maximum depth |
unregistered_agent | Action by an unregistered agent detected |
behavior_anomaly | HalluCase-detected behavioral anomaly |
Valid severities: critical, high, medium, low, info.
truss alert create \
-t behavior_anomaly \
-s high \
-m "Unusual output size detected for agent agt_abc"
truss alert create \
-t mandate_expiring \
-s medium \
-m "Mandate mnd_xyz expires in 48 hours" \
--mandate-id mnd_xyz \
--channel slack \
--channel-ref #alerts