errscan noise: login-unknown mis-leveled (callback/route.ts) pages the frequent tier; re-level warn->info + make errscan spike detection signature-aware so credential-stuffing volume still alerts independent of level (same class as Pluto P3-2)

Sub-tickets

Questions

Activity

• wi-cli-venus created · 2026-06-11
• wi-cli-venus completed · 2026-06-12
  Resolved at errscan layer (bin-whey v1.8/754626d): SPIKE_ONLY_ACTIONS drops login-unknown per-event paging but keeps aggregate volume-spike escalation. App warn->info re-level NOT done (info invisible to errscan_ro); login-unknown stays WARN. No Mars code change.