{"id":"incident.live.v2","title":"Live incidents","unit":"incidents","chain_set":"eip155:8453 (Base)","window":"last 72 hours","definition":"Detections that are a harm AND recent: a retry loop burning an agent's money, a registration changing owner under a binding somebody relies on, or signing delegated to an implementation outside the curated allowlist, with an event time inside the last 72 hours.","method":"Each hourly detector run closes any row that is not a harm kind or has aged out of the window, so the open flag means exactly this rule and nothing else. Mint bursts are never incidents.","excludes":["Mint bursts, of any size. They measure a shape, not a harm.","Endpoints that never answer. That is a statement about our attempts, not damage done to anyone.","Anything older than 72 hours, which stays in the detection log."],"does_not_assert":["That zero means nothing bad is happening anywhere. It means none of these detectors has fired on a harm in what we measure.","That an incident is malicious. An identity changing owner can be a legitimate sale; it is an incident because anyone relying on the old owner is now exposed."],"source":"AFG-Pulse detectors","since":"2026-09-11","supersedes":"incident.open.v1","valid_until":"2026-10-21","superseded_by":"incident.live.v3","revisions":[],"body_sha256":"bcbca0747ffc2817ee8c6c3d36993d86f8abf6a25e6864214cef57d81460c936","url":"https://agenticfinancegraph.com/def/incident.live.v2","ladder":"https://agenticfinancegraph.com/ai-agent-liveness-methodology-l0-l9-ladder","license":"https://creativecommons.org/licenses/by/4.0/","attribution":"Agentic Finance Graph — https://agenticfinancegraph.com"}