The request
{
"name": "wever_spending-anomaly-check",
"arguments": {
"asset": "USDC",
"rules": {
"per_transaction_cap": "500",
"counterparty_caps": [
{
"counterparty": "Example Cloud",
"cap": "120",
"period": "month"
}
]
},
"transactions": [
{
"id": "t1",
"amount": "49.00",
"counterparty": "Example Cloud",
"category": "Infrastructure",
"timestamp": "2026-10-02T09:00:00Z"
},
{
"id": "t2",
"amount": "49.00",
"counterparty": "Example Cloud",
"category": "Infrastructure",
"timestamp": "2026-10-02T09:12:00Z"
},
{
"id": "t3",
"amount": "120.00",
"counterparty": "Data Feeds Ltd",
"category": "Data",
"timestamp": "2026-10-05T10:00:00Z"
},
{
"id": "t4",
"amount": "52.00",
"counterparty": "Example Cloud",
"category": "Infrastructure",
"timestamp": "2026-10-16T09:00:00Z"
},
{
"id": "t5",
"amount": "2400.00",
"counterparty": "GPU Rentals",
"category": "Compute",
"timestamp": "2026-10-21T15:30:00Z"
},
{
"id": "t6",
"amount": "60.00",
"counterparty": "Data Feeds Ltd",
"category": "Data",
"timestamp": "2026-10-26T10:00:00Z"
}
]
}
}What the report returns
Verdict: rules_broken.
over_transaction_capTransaction t5: 2400.00 USDC to GPU Rentals is over the 500.00 USDC per-transaction cap by 1900.00 USDC.counterparty_cap_exceededExample Cloud totals 150.00 USDC in 2026-10, over its 120.00 USDC monthly cap by 30.00 USDC; transaction t4 crossed it.possible_duplicate2 payments of 49.00 USDC to Example Cloud within 12 minutes: transaction t1, transaction t2.outlier_highTransaction t5: 2400.00 USDC to GPU Rentals is above the 333.00 USDC upper fence for these 6 transactions, whose median is 56.00 USDC.
Six transactions, four flags: the 2400.00 USDC payment breaks the per-transaction cap and stands out from the set, Example Cloud passes its monthly cap on its third payment, and the first two Example Cloud payments look like one charge made twice. Raise the cap to 150 and the counterparty flag clears; the duplicate and the outlier stay until the payments themselves change.