Part of the v1 wire, kept byte-identical for the existing client. Do not build new integrations against it. The path ovok uses to push thresholds.

Unknown ids are reported in misses[] rather than failing the batch. Trigger metadata is MERGED and left untouched when absent — a push that omits it does not clear the project stamp.

Send resolvedAt (the instant the configuration was COMPUTED, not sent) to have this push refused rather than applied when the patient already carries a configuration resolved strictly later. Refusal is a silent no-op reported as staleIgnoredCount, never an error. Omitting it applies the push unconditionally, exactly as before.