Empirical mechanistic anomaly detection