feat: Add rule review status, polish rules (#3)

* Add rule review status

* Fix and improve rules

* Add tests for gauge threshold type rules

* Improve rule rox_sensor_resolver_channel_size

* Review and polish rules

* Make numbers easier to read by humans

* Bump version to 0.0.3

Author: vikin91

VERSION

@@ -1 +1 @@
-0.0.2
+0.0.3

automated-rules/cluster_entities_relationship.toml

@@ -1,6 +1,12 @@
 rule_type = "composite"
 display_name = "cluster_entities_relationship"
-description = "Validate cluster entities relationships"
+description = """
+Validate cluster entities relation of number of containers, their endpoints (ports), and IP addresses.
+"""
+
+reviewed = "Partially, by a human"
+last_review_by = "Piotr"
+last_review_on = "30-01-2026"
 
 [composite_config]
 
@@ -28,15 +34,22 @@ numerator = "endpoints"
 denominator = "containers"
 min_ratio = 0.5
 status = "yellow"
-message = "Entities: {containers} containers, {endpoints} endpoints, {ips} IPs - Low endpoint ratio"
+message = """
+Entities: {containers} containers, {endpoints} endpoints, {ips} IPs - Low endpoint to container ratio.
+This roughly means that more than half of the containers have 0 endpoints (ports). 
+This is unusual, however possible.
+"""
 
 [[composite_config.checks]]
 check_type = "ratio"
 numerator = "ips"
 denominator = "endpoints"
 min_ratio = 0.5
 status = "yellow"
-message = "Entities: {containers} containers, {endpoints} endpoints, {ips} IPs - Low IP ratio"
+message = """
+Entities: {containers} containers, {endpoints} endpoints, {ips} IPs - Low IP to endpoints ratio.
+We expect that there should be more unique IP addresses assigned to this number of containers and endpoints.
+"""
 
 [messages]
 green = "Entities: {containers} containers, {endpoints} endpoints, {ips} IPs (healthy ratios)"

automated-rules/cpu_throttling.toml

@@ -1,6 +1,9 @@
 rule_type = "percentage"
 display_name = "cpu_throttling"
 description = "CPU throttling percentage"
+reviewed = "No, AI-generated"
+last_review_by = ""
+last_review_on = "never"
 
 [percentage_config]
 numerator = "rox_sensor_process_cpu_nr_throttled"

automated-rules/dedupe_cache_hit_rate.toml

@@ -1,6 +1,9 @@
 rule_type = "cache_hit_rate"
 display_name = "dedupe_cache_hit_rate"
 description = "Deduplication cache effectiveness"
+reviewed = "No, AI-generated"
+last_review_by = ""
+last_review_on = "never"
 
 [cache_config]
 hits_metric = "rox_sensor_dedupe_cache_hits"

automated-rules/file_descriptors.toml

@@ -1,6 +1,9 @@
 rule_type = "percentage"
 display_name = "file_descriptors"
 description = "File descriptor utilization"
+reviewed = "No, AI-generated"
+last_review_by = ""
+last_review_on = "never"
 
 [percentage_config]
 numerator = "process_open_fds"

automated-rules/go_goroutines.toml

@@ -2,6 +2,9 @@ rule_type = "gauge_threshold"
 metric_name = "go_goroutines"
 display_name = "go_goroutines"
 description = "Number of goroutines"
+reviewed = "No, AI-generated"
+last_review_by = ""
+last_review_on = "never"
 
 [thresholds]
 low = 10000

automated-rules/go_memstats_heap_objects.toml

@@ -2,16 +2,19 @@ rule_type = "gauge_threshold"
 metric_name = "go_memstats_heap_objects"
 display_name = "go_memstats_heap_objects"
 description = "Number of heap objects"
+reviewed = "No, AI-generated"
+last_review_by = ""
+last_review_on = "never"
 
 [thresholds]
 low = 1000000
 high = 10000000
 higher_is_worse = true
 
 [messages]
-green = "{value:.0f} heap objects (healthy)"
-yellow = "{value:.0f} heap objects (elevated - monitor memory)"
-red = "{value:.0f} heap objects (very high - significant memory use)"
+green = "{value_human} heap objects (healthy)"
+yellow = "{value_human} heap objects (elevated - monitor memory)"
+red = "{value_human} heap objects (very high - significant memory use)"
 
 [remediation]
 red = "Very high heap object count. Check for memory leaks. Review object allocation patterns."

automated-rules/go_threads.toml

@@ -2,6 +2,9 @@ rule_type = "gauge_threshold"
 metric_name = "go_threads"
 display_name = "go_threads"
 description = "Number of OS threads"
+reviewed = "No, AI-generated"
+last_review_by = ""
+last_review_on = "never"
 
 [thresholds]
 low = 100

automated-rules/heap_utilization.toml

@@ -1,6 +1,9 @@
 rule_type = "percentage"
 display_name = "heap_utilization"
 description = "Heap memory utilization"
+reviewed = "No, AI-generated"
+last_review_by = ""
+last_review_on = "never"
 
 [percentage_config]
 numerator = "go_memstats_heap_alloc_bytes"

automated-rules/http_incoming_in_flight_requests.toml

@@ -2,6 +2,9 @@ rule_type = "gauge_threshold"
 metric_name = "http_incoming_in_flight_requests"
 display_name = "http_incoming_in_flight_requests"
 description = "HTTP in-flight requests"
+reviewed = "No, AI-generated"
+last_review_by = ""
+last_review_on = "never"
 
 [thresholds]
 low = 10