Mean calculated in code

Std dev in code

2-sigma threshold applied

Percentage change in code

Z-score computed in code

Permitted stdlib only

Data bound to variables

Rate-of-change in code

Anomaly count from code

Script executed or shown

Executive Summary fields

Anomaly type taxonomy

Severity classification present

Detailed anomaly entry format

Anomaly Dashboard — category table

Anomaly Dashboard — dimension table

False Positive Assessment

Baseline Comparison statistical analysis

Action Plan three-part structure

Deviation in std devs stated

Security indicators identified

Waste patterns identified

50% account threshold applied

Security section separate

Waste section separate

Unusual region flagged

Security action recommended

Waste savings quantified in code

Misconfiguration pattern checked

High severity for security