kaffa a28d7fd646 Add time-period models, outlier filtering, and background retrain ...

- Split single IsolationForest into 4 period models (night/morning/afternoon/evening)
- Each period trained independently on its time window data
- Filter attack samples during retrain using existing model scores (threshold -0.5)
- Retrain runs in background thread with lock, inference continues uninterrupted
- New pickle format 'period_models' with automatic old format detection
- SIGUSR1 and auto-retrain both use background mode

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-07 10:43:38 +09:00

39 KiB

Executable File

Raw Blame History

View Raw