Signals via API

Public sample from today's flagship detail endpoint. Public payloads can be limited or redacted. The backend exposes read endpoints for signals, storylines, and briefings.

GET /v1/narratives/5bac1436-cc3e-41d3-949d-056d0973f5b9?tenant=cybersecurity

{
  "id": "5bac1436-cc3e-41d3-949d-056d0973f5b9",
  "title": "postgresql18: CVSS (Max): 8.8",
  "summary": "=========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2026.1718 Security update for postgresql18 23 February 2026 =========================================================================== AUSCERT Security Bulletin Summary --------------------------------- Product: postgresql18 Publisher: SUSE Operating System: SUSE Resol",
  "first_seen_at": "2026-02-22T22:52:35Z",
  "last_seen_at": "2026-02-22T23:15:19Z",
  "created_at": "2026-02-23T06:09:20.396467Z",
  "updated_at": "2026-02-23T18:06:58.159991Z",
  "timeframe": "24h",
  "run_id": null,
  "metrics": {
    "divergence": 29.5122,
    "post_count": 19,
    "momentum_1h": 0,
    "momentum_7d": 19,
    "score_total": 1.553185,
    "shill_score": 30,
    "momentum_24h": 19,
    "market_movers": [],
    "evidence_score": 0.25,
    "unique_authors": 1,
    "coherence_score": 0.5894,
    "diversity_bonus": 0.0875,
    "duplicate_ratio": 0,
    "platforms_count": 1,
    "social_momentum": 19,
    "divergence_label": "chatter_without_pricing",
    "market_conviction": 0,
    "origin_share_top1": 1,
    "unique_publishers": 1,
    "origin_layer_posts": 0,
    "source_types_count": 1,
    "unique_authors_24h": 1,
    "unique_origin_urls": 19,
    "amplifier_share_top1": 1,
    "author_concentration": 1,
    "publisher_share_top1": 1,
    "amplifier_layer_posts": 19,
    "concentration_penalty": 0.3,
    "unique_origin_domains": 1,
    "source_diversity_bonus": 0,
    "unique_publisher_types": 1,
    "unique_origin_publishers": 1
  },
  "platforms": [
    "rss"
  ],
  "top_tickers": [],
  "why_now": [],
  "display_title": "Critical Security Updates Released for PostgreSQL and Linux Kernel",
  "display_summary": "Recent security updates have been issued for PostgreSQL, Linux Kernel, and other software, addressing critical vulnerabilities with CVSS scores up to 9.8. Users are urged to apply these patches promptly to mitigate risks.",
  "narrative_frame_display": null,
  "display_tags": [
    "security",
    "bulletins_auscert"
  ],
  "tags": [
    "security",
    "bulletins_auscert"
  ],
  "cscope_tags": [
    "security",
    "bulletins_auscert"
  ],
  "why_now_display": [
    "Evidence mix: 19 sampled posts across 1 source types.",
    "Origins: 1 unique origin domains across the allowed sources."
  ],
  "why_it_matters_display": [
    "Critical vulnerabilities can lead to severe security breaches if not addressed promptly.",
    "Regular updates are essential to maintain system integrity and protect sensitive data.",
    "High CVSS scores indicate the potential impact of these vulnerabilities on systems."
  ],
  "show_why": true,
  "sources_display": [
    {
      "url": "http://portal.auscert.org.au/bulletins/ESB-2026.1728/",
      "label": "AusCERT - Bulletins: snpguest: CVSS (Max): 7.5",
      "published_at": "2026-02-22T23:15:19+00:00"
    },
    {
      "url": "http://portal.auscert.org.au/bulletins/ESB-2026.1727/",
      "label": "AusCERT - Bulletins: openCryptoki: CVSS (Max): 6.8",
      "published_at": "2026-02-22T23:15:16+00:00"
    },
    {
      "url": "http://portal.auscert.org.au/bulletins/ESB-2026.1726/",
      "label": "AusCERT - Bulletins: modsecurity-crs: CVSS (Max): 9.8",
      "published_at": "2026-02-22T23:15:11+00:00"
    },
    {
      "url": "http://portal.auscert.org.au/bulletins/ESB-2026.1725/",
      "label": "AusCERT - Bulletins: libvpx: CVSS (Max): 8.8",
      "published_at": "2026-02-22T23:09:39+00:00"
    },
    {
      "url": "http://portal.auscert.org.au/bulletins/ESB-2026.1724/",
      "label": "AusCERT - Bulletins: vexctl: CVSS (Max): 8.1",
      "published_at": "2026-02-22T23:09:17+00:00"
    }
  ],
  "llm_status": "partial_fallback",
  "llm_meta": {
    "model": "gpt-4o-mini",
    "prompt_version": "enrich_v2",
    "input_hash": "efbb0312909c80d092ab8e4420017742526ed7c13ab891664168c83141de1df4",
    "updated_at": "2026-02-24T06:11:54.322765+00:00",
    "llm_metadata": {
      "env": "prod",
      "host": "e47ed83e0442",
      "stage": "signals.enrich",
      "run_id": "33dd57a2-597a-4ad3-8341-577a6070d074",
      "tenant": "cybersecurity",
      "service": "api",
      "pipeline": "pipeline_run",
      "correlation_id": "5bac1436-cc3e-41d3-949d-056d0973f5b9"
    },
    "fallback_fields": [
      "narrative_frame",
      "recurring_claims:0,1,2"
    ],
    "status_reason": "narrative_frame_not_grounded"
  },
  "story_id": "815f805a-7c51-4859-8c9a-4dc54fd465a2"
}

• Signals and storylines feed endpoints with filtering and rate limits
• Briefing delivery endpoints for integrations
• Evidence link payloads for auditability

• Route top stories into Slack or Teams for morning and evening desk updates.
• Sync storyline evidence into Notion, Airtable, or internal research trackers.
• Feed metrics into BI dashboards for momentum, concentration, and source mix monitoring.

Quick start endpoints: /v1/feed/stories, /v1/signals, /v1/storylines/search, /v1/briefings/latest.

For product access, see Pricing.