Alert trigger and resolve events from merchant error logs

You get transaction logs with timestamp, merchant_id, status_code and count. For each (merchant_id, status_code) pair, emit a TRIGGER event when that error's count over a recent time window reaches a threshold, and a RESOLVE event when it later falls back below the threshold. Output the events in order. Later parts extend the rules.