Evidence

Insights start from a deterministic evidence bag. The provider only sees scrubbed facts — never raw database access.

What is collected

For an incident insight, evidence may include (when present):

Incident + timeline (bounded)
Attached alerts / monitors
Trace / log / browser aggregates via impact correlation IDs
Deployments when real rows exist

Pipeline overview: AI Insights.

Availability

Every section reports available plus a reason when empty. Missing user impact is unavailable — never coerced to zero.

Bounds

Hard caps limit how many alerts, traces, logs, browser rows, and timeline events enter the bag. Oversized evidence is truncated — not silently invented.

Limitations

Correlation depends on IDs already attached to the incident path.
Privacy scrubbing runs before the provider — see Privacy & Safety.