The challenge.
Risk signals were scattered, so issues surfaced late and inconsistently.
The client wanted to score and act on risk from one view.
Rules had to be adjustable without a code change every time.
False positives had to stay manageable, or reviewers would start ignoring the queue.



