How does token metering catch anomalies?

By comparing current consumption to historical baselines per user, per skill, per time of day. A user whose token consumption jumps 50x overnight, or a skill whose token cost per call doubles, gets surfaced for review. This is the leading indicator of compromised credentials, prompt loops, or misconfiguration. The platform stre