Anomaly detection
Train a detector and make threshold selection an explicit workflow decision.
Import this workflow from AkôFlow Hub
Open the public README and measured execution results. The Hub includes the execution capture, activity metrics, logs and version history. Reading public results does not require an account.
In Desktop, choose Create workflow → Import from Hub and paste this version-specific URI:
akoflow://hub/publications/43abd581-bea8-4067-97d6-b7db99b34374/versions/1
Download the exact workflow YAML (v1). Configure the runtime prerequisites below before planning and executing it.
Run this example locally
Fit a Gaussian sensor baseline, score held-out normal and anomalous signals, select a threshold by measured F1, and publish the detected anomalies and calibration metrics.
Install Go and Python 3.12 or newer.
git clone https://github.com/UFFeScience/akoflow-examples.git &&
cd akoflow-examples &&
git checkout --detach d890c3171e3661890305b763b8fc3ede48bb61b4 &&
cd machine-learning/anomaly-detection &&
./prepare.sh &&
./run.sh
Run the block from the directory where you keep your repositories. If you already cloned the repository, enter this example's directory and run ./prepare.sh && ./run.sh.
Preparation downloads the Go module and any declared Python packages once. The workload then runs locally with offline input data. Every meaningful step is a separate process; independent activities run in parallel after their dependencies complete.
Read outputs/manifest.json for the generated artifacts, outputs/dag-validation.json for dependency waves, and outputs/stage-<activity>.json for each activity's observed result. A failed stage stops the run and prevents a successful final manifest.
Expected outputs: anomalies.json, metrics.json.
Run the same activities in Desktop
Start your local AkôFlow daemon with Docker available and configure AKOFLOW_API_TOKEN in your shell. From this example's directory, run:
go run ../../tools/daemon-local -root ../.. -example machine-learning/anomaly-detection
This command validates the daemon connection, builds the declared image, registers the local environment and workflow, and submits a real run. The daemon owns execution and file transfers. Open the printed run ID in Desktop to inspect each activity.
Activity responsibilities
| Activity | Responsibility |
|---|---|
collect-signals | Execute the collect-signals stage and publish its declared outputs for downstream activities. |
build-features | Execute the build-features stage and publish its declared outputs for downstream activities. |
train-detector | Execute the train-detector stage and publish its declared outputs for downstream activities. |
score-validation | Execute the score-validation stage and publish its declared outputs for downstream activities. |
choose-threshold | Execute the choose-threshold stage and publish its declared outputs for downstream activities. |
publish | Execute the publish stage and publish its declared outputs for downstream activities. |
Inputs
- Signal dataset
- Feature specification
- Operating-cost policy
Outputs
- anomalies.json
- metrics.json
Provenance to preserve
- Time window
- Feature code
- Threshold rationale
Source bundle
The executable workflow and its implementation files are maintained in the separate AkôFlow examples repository. The documentation intentionally keeps code, container recipes, generators, and validation scripts out of the narrative page.
Open the complete source bundle ↗Execution evidence
Verified on local Docker: 6/6 activities completed. These captures belong to run showcase-anomaly-detection-local-aeca41545d-run-20261020t190918.297019000.
Read the daemon execution record · Local output manifest
Each stage also ran through the standalone local command. Read the dependency and artifact validation.
collect-signals
After: workflow start.
build-features
After: collect-signals.
train-detector
After: build-features.
score-validation
After: train-detector.
choose-threshold
After: score-validation.
publish
After: choose-threshold.
Execution considerations
Preserve time-based splits to prevent leakage. Feature construction may require more data movement than training.
AkôFlow boundary: the engine schedules, deploys, executes, transfers data, and records evidence. The ML or agent framework remains an implementation choice inside each activity.