Weather

<!-- Copyright 2026 Anthropic PBC -->

<!-- SPDX-License-Identifier: Apache-2.0 -->

Weather

Standing rules in CLAUDE.md apply — especially rule 16 (closed-gate), rule 17 (announced-baseline), rule 18 (missing-signal), rule 19 (flagged-judgment), and rule 10 (fresh reader). Never re-investigate and post every cycle — that is the most expensive and least readable thing a status agent can do. The phases below keep the report cheap and worth reading.

flowchart TD
    T["Schedule fires"] --> G{"Cadence guard:<br/>too soon since the last full run?"}
    G -->|yes - most firings| SKIP["Log one skip line and stop.<br/>No fetches, no posts"]
    G -->|no| C["Collect health signals<br/>with fixed queries.<br/>A failed fetch reads as<br/>unavailable, never healthy"]
    C --> M["Compute the mood tier<br/>sunny to stormy,<br/>from the human-set table"]
    M --> R["Rewrite the report page.<br/>Every cycle, unconditionally"]
    R --> E{"Did a listed event fire?<br/>new incident, trunk blocked or cleared,<br/>tier crossed, incident update"}
    E -->|yes| POST["Post to the channel,<br/>leading with the trigger"]
    E -->|no| Q["Stay silent.<br/>The report page is still current"]

Two outputs, two policies:

• The report page (a channel canvas or a file in this repo — bind it once in ONCALL.md) is rewritten every full cycle, unconditionally. It is the always-current picture; anyone can look anytime.
• The channel gets a message only when an event gate fires (below). Silence means "nothing you care about changed," and the routine's value depends on readers being able to trust that.

Phase 0 — cadence guard (always first, usually last)

Two cheap reads, nothing else: the open incident records, and the last stored report. Compute the target gap between real runs:

• page-severity incident open → {{10 min}}
• any incident open → {{20 min}}
• quiet → {{60 min}}

Compute it from the union of the severities open now and the severities in the last report — a just-closed page-severity incident holds the fast lane one extra cycle, so its closure announcement doesn't wait for the slow lane. If now − last_report < target − 2 min (the −2 absorbs scheduler jitter so a 20-minute target doesn't miss at 19m58s), log one skip line and STOP — no fetches, no posts. Most firings end here and cost almost nothing.

Phase 1 — collect (deterministic reads, no investigation)

Fetch each health signal through its STACK.md binding: the open incident records, build/pipeline health, merge-queue stats, deploy lag, and capacity signals — whatever ONCALL.md's health-signals section names. This is collection, not triage: fixed queries, no chasing. If something needs investigating, that's the triage skill's job and a human's call to start it.

A failed fetch makes its field unavailable this cycle and goes into data_gaps (rule 18). Never substitute a guess, a stale value presented as fresh, or "probably fine".

Preprocess the incident list before it touches anything downstream:

• drop resolved-but-record-open incidents (the latest update says fixed/postmortem — someone is doing paperwork, not fighting a fire)
• drop long-running umbrellas open more than {{72h}} whose own latest update says "quiet, monitoring"
• anything you can't read is a data_gaps count ("2 records unreadable"), never a name

Count what you dropped into the report (filtered_paperwork_count) so the filter is auditable (rule 19).

The mood is computed, never judged

Four tiers — sunny < partly_cloudy < overcast < stormy — answering exactly one reader question: "should I worry about merging right now?" Pipeline, in this order, no other order:

1. Base = worst of the two base signals' tiers. ONCALL.md's weather section names the two base signals and carries the tier-boundary table mapping each signal's value to a tier — human-set at the Interview, never invented here (rule 15). For a CI team the base signals are deploy freshness and trunk health — the two things a reader feels: how long until my merge is deployable, and is the trunk what's blocking it. If the table is absent, report the configuration gap and stop; never improvise boundaries. Incident-record state is never the base — an open record with green metrics is paperwork, not a sick pipeline.
2. Discounts (can only LOWER, and must say so in prose):
   • backlog-draining — a trailing-window percentile elevated but every instantaneous health signal green means the number is the tail of an earlier incident draining through the window, not what a fresh event will see: cap at partly_cloudy and write it out ("p90 still reads 4h from this morning's outage backlog — fresh merges are moving normally").
   • merge-wave — trunk lag elevated, nothing blocked, AND the latest trunk build finished with zero failures: cap at partly_cloudy. If that build is still running, the discount does NOT apply — absence of a failure on an unfinished build proves nothing.
3. Floors (can only RAISE): capacity stockout → at least overcast, never stormy on its own (builds are slow, not stuck). Any failed data fetch → mood may not be better than the last report's tier (rule 18).
4. Incident modifier, LAST and bounded: a live page-severity incident forces stormy through any discount; two or more live incidents (or one just below page severity) bump exactly one tier; a single minor incident with green metrics bumps nothing.

Hysteresis: once a tier is elevated, its re-entry threshold tightens ~20% (a 30-minute entry threshold becomes ~24 minutes to stay) so the boundary doesn't flap.

Event gates — when the channel hears about it

Check in order, stop at the first match; the match names the trigger (six words or fewer) that leads the post.

1. Trunk blocked — post immediately, no hold; most urgent event.
2. Blocker cleared — vs announced state, AND held one confirming cycle. Name the branch or pipeline that cleared.
3. New incident — vs announced.
4. Incident closed — vs announced, held one confirming cycle.
5. Capacity stockout entered/cleared — held {{3}} cycles (see damping — this is a bimodal signal).
6. Mood tier crossed — vs announced. Worsening posts immediately; improvement is held one confirming cycle. Trigger format: now overcast (was sunny). Two exceptions: (a) if the only mover is a discount flag flipping (e.g. backlog_discount_applied turning on while the raw number bucket didn't move), that still fires — the meaning of the number changed, which is news; (b) a crossing whose only mover is a floor tied to a gate with its own hold — the stockout floor while gate 5's count is running — waits for that gate, otherwise gate 6 would broadcast the exact blip gate 5's hold exists to suppress.
7. Staleness check-in — nothing else fired, more than {{4h}} since the last post, and the last post would now mislead a fresh reader. Default to skip when borderline.
8. Open-incident update — status flip, severity change, or a stated ETA slipped more than {{30 min}} / was withdrawn, even when the mood and the incident set are unchanged.

THIS LIST IS EXHAUSTIVE (rule 16). If a gate fires, you post — no second judgment between the gate and the send, no invented suppression. A missing anti-noise rule is a proposed PR to this list, never a call made at send time.