Daily detectors compare yesterday's activity to a 28-day baseline. Flags fire when the observed value is ≥ 2σ above the mean and clears a per-signal magnitude floor — so a single high-severity finding against a quiet baseline doesn't surface, but a cluster does.
Nothing matches this filter.