Why doesn't an alert that reports a score moving help me?
An alert that reports a score moving has done detection’s job, not attribution’s: it tells you something changed, not what caused it. Those are separate steps. Detection compares two windows and flags a shift; attribution investigates the shift and names the responsible change. A raw score spike carries none of that investigation, so the page just moves the mystery to whoever is on call. They still have to pull the traces that started failing, line the onset up against the commit log, prompt edits, and any model or tool changes, then test each candidate against what the traces actually show until one holds up. That’s real work, not a lookup, and it takes the same time regardless of how fast the alert fired. A page worth waking up for either does that work first or hands over the failing traces, so the search starts from evidence instead of a blank commit log.