Signals via API

Public sample from today's flagship detail endpoint. Public payloads can be limited or redacted. The backend exposes read endpoints for signals, storylines, and briefings.

GET /v1/narratives/443bc603-cc66-4070-add8-fb0c70baed71?tenant=cybersecurity

{
  "id": "443bc603-cc66-4070-add8-fb0c70baed71",
  "title": "openexr: CVSS (Max): 8.8",
  "summary": "=========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2026.7868 openexr security update 14 July 2026 =========================================================================== AUSCERT Security Bulletin Summary --------------------------------- Product: openexr Publisher: Red Hat Operating System: Red Hat Resolution: Patch",
  "first_seen_at": "2026-07-13T12:15:07Z",
  "last_seen_at": "2026-07-14T14:23:33Z",
  "created_at": "2026-07-14T05:09:20.489160Z",
  "updated_at": "2026-07-14T17:11:49.588861Z",
  "timeframe": "24h",
  "run_id": "1156bab9-d01d-4918-acd8-040d9ae199f2",
  "metrics": {
    "divergence": 38.6573,
    "post_count": 60,
    "momentum_1h": 0,
    "momentum_7d": 60,
    "score_total": 2.200586,
    "shill_score": 29.5,
    "momentum_24h": 60,
    "market_movers": [
      {
        "url": "https://polymarket.com/market/btc-updown-5m-1784055300",
        "question": "Bitcoin Up or Down - July 14, 2:55PM-3:00PM ET",
        "delta_24h": 0,
        "liquidity": 6011.7352,
        "market_id": "0x99549f139456b55beae2fb144ae9e80696ae65b801c34f529fbe14b6871f6319",
        "open_interest": null
      },
      {
        "url": "https://polymarket.com/market/btc-updown-5m-1784056500",
        "question": "Bitcoin Up or Down - July 14, 3:15PM-3:20PM ET",
        "delta_24h": 0,
        "liquidity": 5965.0497,
        "market_id": "0x59528bf343747af5f5423ca8445ae3d999aef56b9a8d66b9a591b19b6eebbad8",
        "open_interest": null
      },
      {
        "url": "https://polymarket.com/market/btc-updown-5m-1784058600",
        "question": "Bitcoin Up or Down - July 14, 3:50PM-3:55PM ET",
        "delta_24h": 0,
        "liquidity": 6043.5525,
        "market_id": "0x783b51662fab2b1acddf77cab977a7299a1121e070bb93f8f4e43ffaeccc9365",
        "open_interest": null
      }
    ],
    "evidence_score": 0.5,
    "unique_authors": 2,
    "coherence_score": 0.5745,
    "diversity_bonus": 0.125,
    "duplicate_ratio": 0.0833,
    "platforms_count": 1,
    "social_momentum": 60,
    "divergence_label": "chatter_without_pricing",
    "market_conviction": 0,
    "origin_share_top1": 0.983333,
    "unique_publishers": 2,
    "origin_layer_posts": 0,
    "source_types_count": 1,
    "unique_authors_24h": 2,
    "unique_origin_urls": 60,
    "amplifier_share_top1": 0.983333,
    "author_concentration": 0.9833,
    "publisher_share_top1": 0.983333,
    "amplifier_layer_posts": 60,
    "concentration_penalty": 0.286111,
    "unique_origin_domains": 2,
    "source_diversity_bonus": 0,
    "unique_publisher_types": 1,
    "unique_origin_publishers": 2
  },
  "platforms": [
    "rss"
  ],
  "top_tickers": [],
  "why_now": [],
  "display_title": "Multiple critical security updates issued for Linux kernel and key open source software",
  "display_summary": "Coverage discusses speculative scenarios for 2026; treat as market chatter and see linked sources.",
  "narrative_frame_display": null,
  "entities": {
    "projects": [
      "Linux Kernel",
      "Firefox for iOS",
      "openexr",
      "freeipmi",
      "tiff",
      "libpng15",
      "libslirp",
      "curl"
    ],
    "companies": [
      "SUSE",
      "Red Hat",
      "Mozilla Foundation"
    ]
  },
  "recurring_claims": [
    {
      "claim": "SUSE released multiple live patches for Linux kernel vulnerabilities with CVSS scores up to 8.5",
      "evidence_urls": [
        "https://portal.auscert.org.au/bulletins/ESB-2026.7836",
        "https://portal.auscert.org.au/bulletins/ESB-2026.7834",
        "https://portal.auscert.org.au/bulletins/ESB-2026.7848"
      ]
    },
    {
      "claim": "Red Hat issued important security updates for openexr and freeipmi with CVSS scores up to 8.8",
      "evidence_urls": [
        "https://portal.auscert.org.au/bulletins/ESB-2026.7868",
        "https://portal.auscert.org.au/bulletins/ESB-2026.7850"
      ]
    },
    {
      "claim": "Mozilla fixed a low-impact vulnerability in Firefox for iOS 152.4",
      "evidence_urls": [
        "https://cyber.gc.ca/en/alerts-advisories/mozilla-security-advisory-av26-692",
        "https://portal.auscert.org.au/bulletins/ESB-2026.7841"
      ]
    }
  ],
  "stance_map": [
    {
      "stance": "neutral",
      "who": "Canadian Centre for Cyber Security",
      "evidence_urls": [
        "https://cyber.gc.ca/en/alerts-advisories/mozilla-security-advisory-av26-692"
      ]
    }
  ],
  "quality_flags": {
    "mixed_topic_risk": "low",
    "promo_risk": "low",
    "source_quality": "medium"
  },
  "editor_note": null,
  "display_tags": [
    "cve",
    "patch",
    "linux",
    "security",
    "advisory",
    "exploit"
  ],
  "tags": [
    "cve",
    "patch",
    "linux",
    "security",
    "advisory",
    "exploit"
  ],
  "cscope_tags": [
    "cve",
    "patch",
    "linux",
    "security",
    "advisory",
    "exploit"
  ],
  "why_now_display": [
    "Multiple critical patches released simultaneously require urgent attention.",
    "Some CVEs have high CVSS scores indicating severe impact.",
    "Coordinated disclosures highlight active maintenance and threat awareness."
  ],
  "why_it_matters_display": [
    "Linux kernel vulnerabilities can allow remote code execution and system compromise.",
    "Open source software is widely deployed; unpatched vulnerabilities pose broad risk.",
    "Timely patching reduces exposure to exploitation and potential breaches."
  ],
  "show_why": true,
  "sources_display": [
    {
      "url": "https://cyber.gc.ca/en/alerts-advisories/mozilla-security-advisory-av26-692",
      "label": "cyber.gc.ca: Canadian Centre for Cyber Security - Alerts",
      "published_at": "2026-07-14T14:23:33+00:00"
    },
    {
      "url": "http://portal.auscert.org.au/bulletins/ESB-2026.7868/",
      "label": "AusCERT - Bulletins: openexr: CVSS (Max): 8.8",
      "published_at": "2026-07-14T02:38:43+00:00"
    },
    {
      "url": "http://portal.auscert.org.au/bulletins/ESB-2026.7867/",
      "label": "AusCERT - Bulletins: rust-keylime: CVSS (Max): None",
      "published_at": "2026-07-14T02:38:37+00:00"
    },
    {
      "url": "http://portal.auscert.org.au/bulletins/ESB-2026.7866/",
      "label": "AusCERT - Bulletins: imagemagick: CVSS (Max): 9.1",
      "published_at": "2026-07-14T01:38:06+00:00"
    },
    {
      "url": "http://portal.auscert.org.au/bulletins/ESB-2026.7865/",
      "label": "AusCERT - Bulletins: Linux Kernel (Live Patch 47 for SUSE Linux Enterprise 15 SP4): CVSS (Max): 8.4",
      "published_at": "2026-07-14T01:38:02+00:00"
    }
  ],
  "trend_status": "flat",
  "trend_sparkline": "█▁",
  "trend_points_n": 0,
  "trend_window": {
    "lookback_days": 14,
    "max_points": 36,
    "value_key": null
  },
  "llm_status": "accepted",
  "llm_meta": {
    "model": "gpt-4.1-mini-2025-04-14",
    "prompt_version": "enrich_v3",
    "input_hash": "36fec793687f307947249a4c8d62d5d2820621bcf15c55939452ff228f30563d",
    "updated_at": "2026-07-14T17:14:39.861621+00:00",
    "llm_metadata": {
      "env": "prod",
      "host": "3becb33dec2d",
      "stage": "signals.enrich",
      "run_id": "1156bab9-d01d-4918-acd8-040d9ae199f2",
      "tenant": "cybersecurity",
      "service": "api",
      "pipeline": "pipeline_run",
      "correlation_id": "443bc603-cc66-4070-add8-fb0c70baed71"
    }
  },
  "story_id": "8596a329-b403-48a9-a02a-1221471da28f",
  "public_surface": {
    "eligible_for_flagship_sample": false,
    "eligible_for_top_public_brief": true,
    "eligible_for_public_index": false,
    "eligible_only_for_lower_or_internal_surfaces": false,
    "public_rank_score": 8,
    "structural_priority": true,
    "mostly_social": false,
    "community_chatter": false,
    "reader_label": "Limited evidence",
    "excluded_reasons": [
      "narrow_evidence"
    ],
    "source_signals": {
      "post_count": 60,
      "unique_origins": 2,
      "source_types_count": 1,
      "independent_non_social_count": 2,
      "social_source_count": 0,
      "non_social_source_count": 0,
      "why_now_count": 3,
      "why_it_matters_count": 3
    }
  },
  "current_cycle_open": true
}

• Signals and storylines feed endpoints with filtering and rate limits
• Briefing delivery endpoints for integrations
• Evidence link payloads for auditability

• Route top stories into Slack or Teams for morning and evening desk updates.
• Sync storyline evidence into Notion, Airtable, or internal research trackers.
• Feed metrics into BI dashboards for momentum, concentration, and source mix monitoring.

Quick start endpoints: /v1/feed/stories, /v1/signals, /v1/storylines/search, /v1/briefings/latest.

For product access, see Pricing.