Audit root cause traceback evidence integrity
Audit whether an anomaly traceback is complete, point-in-time, multiplicity-controlled and honestly labeled as temporal or causal, including every upstream candidate, path lag, edge identification basis and later root-recovery validation.
What it's for
Makes the site's anomaly-to-root-cause traceback claim precise: Gitrevio can distinguish a temporal precursor from a causally identified path and abstain when the evidence does not support the stronger wording.
What you give it
Inputs split into evidence read from your connected systems, calibration your team owns, and numerical controls that affect precision but never the result's meaning.
| Field | Type | Role | Required |
|---|---|---|---|
| as_of_ms | number ≥ 0 | Your calibration | Yes |
| candidate_screenings | array of objects (11 fields) ≥ 0 items | Evidence | Yes |
| dependency_edges | array of objects (14 fields) ≥ 0 items | Evidence | Yes |
| evidence_artifacts | array of objects (4 fields) | Evidence | Yes |
| graph_versions | array of objects (9 fields) | Evidence | Yes |
| max_detail_rows | integer ≥ 1, ≤ 500 | Numerical control | Optional |
| maximum_false_attribution_rate | number ≥ 0, ≤ 1 | Your calibration | Optional |
| metric_nodes | array of objects (8 fields) | Evidence | Yes |
| minimum_edge_support | integer ≥ 1 | Your calibration | Optional |
| minimum_top_k_recall | number ≥ 0, ≤ 1 | Your calibration | Optional |
| minimum_validation_cases | integer ≥ 1 | Your calibration | Optional |
| require_causal_edges_for_causal_claim | boolean | Your calibration | Optional |
| significance_level | number > 0, < 1 | Your calibration | Optional |
| traceback_cases | array of objects (12 fields) | Evidence | Yes |
| validation_slices | array of objects (10 fields) ≥ 0 items | Evidence | Yes |
Each dependency_edges
record
| Field | Type | Required |
|---|---|---|
| edge_basis_id | one of "randomized", "quasi_experimental", "mechanistic", "temporal_predictive", "correlation" | Yes |
| effect_estimate | number | Yes |
| effect_interval_lower | number | Yes |
| effect_interval_upper | number | Yes |
| evidence_verified | boolean | Yes |
| graph_version_id | string (non-empty) | Yes |
| id | string (non-empty) | Yes |
| maximum_lag_ms | number (≥ 0) | Yes |
| minimum_lag_ms | number (≥ 0) | Yes |
| observed_through_ms | number (≥ 0) | Yes |
| source_artifact_id | string (non-empty) | Yes |
| source_metric_id | string (non-empty) | Yes |
| support_count | integer (≥ 0) | Yes |
| target_metric_id | string (non-empty) | Yes |
{
"as_of_ms": 150,
"candidate_screenings": [
{
"adjusted_p_value": 0.02,
"candidate_metric_id": "review-delay",
"changepoint_at_ms": 50,
"eligible": true,
"evidence_verified": true,
"id": "screen",
"observed_through_ms": 100,
"raw_p_value": 0.01,
"screened": true,
"source_artifact_id": "artifact",
"traceback_case_id": "case"
}
],
"dependency_edges": [
{
"edge_basis_id": "quasi_experimental",
"effect_estimate": 0.3,
"effect_interval_lower": 0.1,
"effect_interval_upper": 0.5,
"evidence_verified": true,
"graph_version_id": "graph-v1",
"id": "edge",
"maximum_lag_ms": 100,
"minimum_lag_ms": 10,
"observed_through_ms": 20,
"source_artifact_id": "artifact",
"source_metric_id": "review-delay",
"support_count": 100,
"target_metric_id": "delivery-delay"
}
],
"evidence_artifacts": [
{
"id": "artifact",
"immutable_hash": "abc",
"independently_verified": true,
"observed_at_ms": 20
}
],
"graph_versions": [ Truncated for display — the full payload is 111 lines.
What you get back
This is the actual output of running the example above — computed by the same function the platform calls, not an illustration.
{
"case_diagnostics": [
{
"claim_type_id": "causal_root",
"decision": "traceback_supported",
"eligible_ancestor_count": 1,
"failed_gates": [],
"passing_validation_slice_count": 1,
"screened_ancestor_count": 1,
"selected_root_diagnostics": [
{
"failed_gates": [],
"metric_id": "review-delay",
"path_edge_basis_ids": [
"quasi_experimental"
],
"path_edge_count": 1
}
],
"selected_root_metric_ids": [
"review-delay"
],
"target_metric_id": "delivery-delay",
"traceback_case_id": "case"
}
],
"configuration": {
"as_of_ms": 150,
"maximum_false_attribution_rate": 0.2,
"minimum_edge_support": 30,
"minimum_top_k_recall": 0.7,
"minimum_validation_cases": 30,
"require_causal_edges_for_causal_claim": true,
"significance_level": 0.05
},
"decision": "use_tracebacks",
"failed_gates": [],
"guardrails": [
"Temporal precedence and graph depth do not establish causation. A causal-root label requires every selected path edge to have randomized, quasi-experimental or independently justified mechanistic identification.",
"Every upstream candidate must be represented on a zero-inclusive screening lattice and multiplicity-adjusted; reporting only the winning path creates selection bias.",
"Results are aggregate diagnostic evidence, not authority to blame, discipline or make employment decisions about a person. Human review and a correction route remain mandatory."
],
"method": "point_in_time_root_cause_traceback_evidence_audit_v1",
"summary": { Truncated for display — the full payload is 53 lines.
How it works
Causal inference & experiment design — Separate what a change caused from what merely moved alongside it.
- 1 Freeze the graph version effective at each incident and reconstruct its acyclic metric graph from immutable evidence available at the case cutoff.
- 2 Require a zero-inclusive screen of every upstream candidate, adjusted significance, an in-window earlier changepoint and supported non-null edges on every selected path.
- 3 Permit causal-root language only when every path edge is randomized, quasi-experimental or independently mechanistic, and require strictly later validation of root recall and false attribution.
Before you trust it
Every tool in the catalog ships with the conditions under which its answer is meaningful — and the conditions under which it should abstain instead of guessing.
Assumptions & guardrails
- Assignment or adoption timing, interference policy, overlap, attrition, and outcome availability match the estimand encoded by the method.
- The candidate lattice is complete, metric definitions and lags were frozen before inspection, artifacts are immutable, and validation includes misses rather than only confirmed incidents.
- A causal label is warranted only when design and diagnostic requirements pass; otherwise treat the result as descriptive or abstain.
- Temporal precedence is not causation, aggregate mechanisms are not individual blame, and a passing audit does not authorize an operational or employment action.
Minimum evidence
- graph_versions: required and organization-defined
- metric_nodes: required and organization-defined
- dependency_edges: at least 0 rows/items
- traceback_cases: required and organization-defined
- candidate_screenings: at least 0 rows/items
- validation_slices: at least 0 rows/items
- evidence_artifacts: required and organization-defined
- as_of_ms: required and organization-defined
How to validate it
Preserve the assignment/adoption design and validate overlap, pre-period or placebo diagnostics, attrition, interference policy, and cluster-level uncertainty; never tune on the estimated effect.
Calibrating it to your org
Same for everyone
The mathematical kernel, validation rules, method version, and JSON output semantics are organization-independent; no tenant-trained coefficients or company benchmark is embedded in the function.
Specific to you
- one point-in-time case bundle joining the graph effective at incident time to every graph ancestor, multiplicity-adjusted candidate result, selected root-to-target path, independent artifact and strictly later root-recovery validation slice
- metric/candidate perimeter, edge direction and causal-identification taxonomy, lag windows, significance family, minimum edge support, root-recovery recall, false-attribution appetite, prohibited attributes, permitted claim type, human review and correction route
Calibration workflow
- 1 Define the management decision, target outcome, aggregate unit, privacy boundary, cadence, and prediction/intervention horizon for this organization.
- 2 Build a tenant-scoped historical cohort using only information available before each prediction or decision; preserve zero periods, censoring, assignment probabilities, and unresolved outcomes when the method requires them.
- 3 Estimate statistical parameters on training history, but obtain costs, utilities, risk tolerance, practical-effect thresholds, capacity, and policy constraints from accountable decision owners.
- 4 Validate on later time windows or held-out aggregate units at the deployment grain, against a simple baseline and the function-specific validation strategy.
- 5 Deploy only if the returned decision clears evidence, overlap, calibration, robustness, and guardrail checks; warning, unsupported, schema-gap, and fallback decisions are abstentions.
- 6 Monitor realized outcomes, data drift, coverage, and decision regret; recalibrate at a governed cadence or after a detected regime/definition change, never merely because a stakeholder dislikes the result.
Call it from your AI
You don't wire up 388 tools in your MCP client. The GitRevio MCP server exposes 18 tools, three of which let an agent search the catalog, read a tool's schema, and run it — so the assistant finds this one on its own.
gitrevio_capabilities_search
{ "q": "audit whether an anomaly traceback is" }
→ finds "audit_root_cause_traceback_evidence_integrity"
gitrevio_capability_describe
{ "capability_id": "audit_root_cause_traceback_evidence_integrity" }
→ returns the input schema and agent guidance shown on this page
gitrevio_capability_run
{ "capability_id": "audit_root_cause_traceback_evidence_integrity", "arguments": { ... } }
→ returns the result shown above Works in Claude Desktop, Claude Code, Cursor, Cline, Continue.dev, Goose and Aider. See the MCP server.
Related tools
Estimate transportable root cause probability
Estimate how likely a mechanism actually caused an observed failure using transport-weighted Bayesian random-effects MCMC across remediation studies, posterior probability of necessity, convergence diagnostics and mandatory unmeasured-confounding sensitivity.
Infer competing root cause posterior
Rank competing, compound and unknown root mechanisms from company-local resolved incidents using partially pooled Dirichlet-Beta learning, strict temporal holdout scoring, reliability-tempered signals and posterior uncertainty rather than a single brittle traceback winner.
Audit CI pipeline evidence integrity
Audit the complete point-in-time change-to-pipeline-to-job-to-rerun cohort, exposing missing CI, orphan records, future leakage, inconsistent required-job outcomes, incomplete provider evidence and same-configuration fail-then-pass flake proxies without scoring people.
Audit incident learning evidence integrity
Audit the complete point-in-time incident-to-postmortem-to-corrective-action lineage, separating missing or contradictory evidence from genuine overdue learning debt without attributing individual fault.
Audit operational alert decision integrity
Audit every point-in-time operational alert evaluation by recomputing fire/suppress decisions and verifying effective policy, cooldown, evidence freshness, context, controls, severity routing, acknowledgement, action and mature outcome lineage.
Estimate software reliability growth
Estimate long-run software reliability growth with a power-law nonhomogeneous Poisson process, bootstrap trend evidence, and future incident exposure.