Anomaly detection sensitivity (0-1, higher = more sensitive)
Enable prompt injection detection
Enable tool API change detection
Polling interval in seconds (minimum 30)
Maximum events to analyze per tick
Time-series retention in days
Enable context pollution tracking
Trust drift threshold (points out of 100)
Webhook URLs for alerts
Alert on these severity levels