Cost anomalies
Per-user cost spike. Sudden 10x volume. Auto-throttle + alert.
Advertisement
Behavioral
Unusual prompt patterns. Cycling through jailbreak variants. Rapid sequential queries.
Advertisement
Content
Cluster prompts by embedding. Novel cluster = new abuse pattern or feature use. Investigate.
Reaction
Auto-throttle. Manual review queue. Alert security team for high severity.