From eeb5f010a36ddfbae94fe065965cae549aff708c Mon Sep 17 00:00:00 2001
From: matt butler <mattbutlerdeveloper@gmail.com>
Date: Sun, 5 Jul 2026 18:24:01 -0400
Subject: [PATCH] docs: remove deleted MetricAggregator from README diagrams

The architecture + stream-processing mermaid diagrams still showed a
MetricAggregator ("30s tumbling windows") node, but that class was removed when
the AnomalyDetector took over detection directly (static-threshold + EWMA
baseline, keyed state). Drop the stale MA/AGG/SPLIT nodes and reconnect the flow:
Flink processor -> AnomalyDetector, and deserializer -> AnomalyDetector. Docs now
match the code.

Claude-Session: https://claude.ai/code/session_01UqLtgdPqeyVM8a1rhtJHit
---
 README.md | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/README.md b/README.md
index e11f43a..a93ad72 100644
--- a/README.md
+++ b/README.md
@@ -27,7 +27,6 @@ graph TB
         ES[Event Simulator<br/>Kafka Producer]
         K[Apache Kafka<br/>KRaft Mode]
         FP[Flink Stream Processor<br/>Flink 2.0.2]
-        MA[MetricAggregator<br/>30s Tumbling Windows]
         AD[AnomalyDetector<br/>Thresholds + EMA Baseline]
     end
 
@@ -53,7 +52,6 @@ graph TB
 
     ES -->|Protobuf| K
     K --> FP
-    FP --> MA
     FP --> AD
     AD -->|Alerts| K
     FP -.->|Metrics| PROM
@@ -133,8 +131,6 @@ flowchart LR
     subgraph "Stream Processing"
         KT[Kafka Topic<br/>stream-events]
         DESER[StreamEventDeserializer<br/>Protobuf]
-        SPLIT{Event Type?}
-        AGG[MetricAggregator<br/>30s Windows]
         DET[AnomalyDetector<br/>Keyed State]
         ALERT[Kafka Topic<br/>stream-alerts]
     end
@@ -143,9 +139,7 @@ flowchart LR
     SR --> SIM
     MG & LG & HG -->|Protobuf| KT
     KT --> DESER
-    DESER --> SPLIT
-    SPLIT -->|Metric| AGG
-    SPLIT -->|All| DET
+    DESER --> DET
     DET -->|Threshold breach| ALERT
 ```