Track resolved_by on problems; suppress scan/ingest recreate after manual resolve; reopen same problem after cooldown; auto-close via heartbeat unchanged. Co-authored-by: Cursor <cursoragent@cursor.com>
- Migration 003; windowed host+type+rule correlation on ingest - GET /problems filters; GET /problems/{id} with event timeline; ack/resolve 409 guard - Tests and SAC_PROBLEM_CORRELATION_WINDOW_MINUTES config Co-authored-by: Cursor <cursoragent@cursor.com>