Aletheia

Aletheia is an event-driven platform that ingests alerts from Zabbix, Grafana and generic webhooks, enriches them with infrastructure context and classifies them using large language models. On top of that classification it applies automated decisions —grouping, delay, escalation and maintenance windows— and executes concrete actions such as creating tickets, sending notifications or issuing acknowledgements. It is built as a set of 13 .NET 10 microservices communicating over Apache Kafka, multi-tenant by design and backed by retrieval-augmented generation (RAG) on Qdrant.

What it does

It turns a noisy stream of alerts into operational decisions and automated actions, reducing the manual workload of on-call teams.

• Ingests alerts from Zabbix, Grafana and generic webhooks into a unified pipeline.
• Enriches each alert with infrastructure context before evaluation.
• Classifies alerts using LLMs backed by RAG over Qdrant.
• Applies automated decisions: grouping, delay, escalation and maintenance windows.
• Executes downstream actions: tickets, notifications and acknowledgements (acks).
• Keeps an inventory graph of the infrastructure and reads its live state during analysis.
• Isolates data and configuration per tenant thanks to its multi-tenant design.

Architecture

The system follows an event-driven microservices architecture, with Kafka acting as the messaging backbone across the 13 .NET 10 services.

• 13 decoupled .NET 10 microservices communicating through events on Apache Kafka.
• Atlas builds the infrastructure inventory graph by authenticating to Azure ARM, AKS or Proxmox through its own connectors, and exposes real-time diagnostic tools that the agentic analysis loop queries to sharpen classification and root cause, with no per-tool duplication of access configuration.
• Multi-provider AI Gateway supporting Azure OpenAI, OpenAI and Ollama.
• RAG over Qdrant as the vector store for classification context.
• YARP-based ingress gateway for request routing.
• Next.js command center over a dedicated BFF, with real-time updates via SignalR.
• Immersive mixed-reality view on WebXR for Quest 3: AR passthrough, the Atlas graph in 3D and the live alert panel.
• Multi-tenant model applied cross-cutting across the whole platform.

Stack

Built in C# on .NET 10, it combines Apache Kafka for event messaging, Qdrant as the vector database for RAG, a multi-provider AI Gateway (Azure OpenAI / OpenAI / Ollama) and a YARP gateway. The frontend is a Next.js command center in TypeScript, with React Three Fiber for the three-dimensional visualization and SignalR for real time.