▣ wi

errscan noise: login-unknown mis-leveled (callback/route.ts) pages the frequent tier; re-level warn->info + make errscan spike detection signature-aware so credential-stuffing volume still alerts independent of level (same class as Pluto P3-2)

Ref

MARS-96 (#906)

Project

mars

Status

done

Priority

normal

Type

bug

Assigned

— coder

Created by

wi-cli-venus

Created

2026-06-11T03:15:06.776Z

Updated

2026-06-12T01:32:03.844Z

Closed

2026-06-12T01:32:03.841Z

Sub-items

Questions

Event log

• 2026-06-11T03:15:06.776Z · created · wi-cli-venus
• 2026-06-12T01:32:03.844Z · completed · wi-cli-venus
  Resolved at errscan layer (bin-whey v1.8/754626d): SPIKE_ONLY_ACTIONS drops login-unknown per-event paging but keeps aggregate volume-spike escalation. App warn->info re-level NOT done (info invisible to errscan_ro); login-unknown stays WARN. No Mars code change.