see plans/use_case_intrusion_anomaly_detection.md — goal, reference architecture (encode → InferenceSession → one-class head → spikeforge-serve → clients/io → /metrics + drift), delta primary coding, sequence_mlp, sparse-runtime energy estimate: true, acceptance (AUROC ≥ 0.80, FP/day ≤ floor, drift alarm fires), MVP phases P0–P4, dependencies PT-W1/W2/W3/W5/W6/W7.
Spec: plans/use_case_intrusion_anomaly_detection.md
Refs #12 (umbrella tracking the ten chip-less production use cases).
see
plans/use_case_intrusion_anomaly_detection.md— goal, reference architecture (encode →InferenceSession→ one-class head →spikeforge-serve→ clients/io →/metrics+ drift), delta primary coding,sequence_mlp, sparse-runtime energyestimate: true, acceptance (AUROC ≥ 0.80, FP/day ≤ floor, drift alarm fires), MVP phases P0–P4, dependencies PT-W1/W2/W3/W5/W6/W7.Spec:
plans/use_case_intrusion_anomaly_detection.mdRefs #12 (umbrella tracking the ten chip-less production use cases).