When an unarmed monitor fires
Most monitors are unarmed, which is the right default. When an unarmed monitor fires, OnePatch records the firing — its state, its reason, and the time — as telemetry you can query and chart. No further action is taken automatically: nothing is paged and no incident is opened. You decide what to do, and you can ask the agent to chart a monitor’s firing history at any time.When an armed monitor fires
An armed monitor escalates. When it fires, OnePatch opens an incident and hands it to the agent to triage. The agent:- Investigates the firing against your live telemetry to understand what happened.
- Either tunes the monitor, if the firing was a false alarm, or opens a pull request against your repository, if it found a real problem.
OnePatch opens one incident per firing episode, not one per evaluation. A monitor on a fast schedule that stays firing produces a single incident, and it cools down after the incident resolves, so you are not paged repeatedly for the same event.
Slack
OnePatch creates an#onepatch-alerts channel in the Slack workspace you connect during setup. When an armed monitor opens an incident, the alert posts there: which monitor fired, why, and a link straight into the incident chat, so you can follow the agent’s investigation from the message itself. Connect the Slack workspace your team actually watches, since this is the channel that carries alerts.
You can pick a different channel name, reconnect Slack, or change the workspace from the Integrations screen.

