# Overview

# Real-time alerts

Don't watch dashboards — get paged. Sentilai posts to your channels the moment a qualifying governance event fires.

## Channels

- **Slack** — an incoming-webhook URL; alerts arrive as formatted messages.
- **Microsoft Teams** — an incoming-webhook URL; alerts arrive as cards.
- **Generic webhook** — a JSON payload for anything else (SIEM hooks, PagerDuty ingestion, custom automation).

## What fires

An alert is sent when an event's severity reaches the channel's **floor** (default: high only), or whenever a request is **blocked** — a block is always alert-worthy. Severity comes from the risk detectors and the AI classifier.

## Setting up

On the **Policy** page, under **Real-time alerts**: pick the channel type, name it, paste the webhook URL, choose the severity floor, and use **Send test** to verify delivery before saving. The destination URL is stored encrypted and never displayed again — treat it like a credential, because anyone holding it can post into your channel.

## Behavior

Delivery is fire-and-forget with a short timeout: alerting can never slow down or fail a developer's AI request. Each qualifying event posts once per matching channel.