Detection is not accusation
Each detection carries a confidence score and becomes a violation with a configurable risk weight. Weight accumulates into a band — low, medium, high, critical. A threshold opens a review case. Nothing is automatic past that point.
