{
  "description": "Certification revoked alert — triggers create_incident and mark_high_risk",
  "alerts": [
    {
      "alertId": "monitor-004",
      "severity": "critical",
      "agentId": "unknown-sdk-v1",
      "reason": "certification_downgraded_to_not_ready",
      "details": "Certification changed from production_ready to not_ready",
      "timestamp": "2026-06-05T00:00:00.000Z",
      "ruleId": "CR-2",
      "source": "continuous-monitoring"
    }
  ],
  "events": [
    {
      "eventType": "certification_revoked",
      "agentId": "unknown-sdk-v1",
      "timestamp": "2026-06-04T00:00:00.000Z",
      "metadata": { "previousStatus": "production_ready" }
    }
  ],
  "configuration": {}
}