#alerting

An alert should need two sightings and a fresh look

The rules our internal health page uses to decide when a failing check becomes an alert, and when the incident ends. All of it is one pure function with a table of tests.