Detection layer
Rules + classifiers + provider safety flags. Multiple detectors for coverage.
Advertisement
Classification
Not just 'bad', but 'why bad'. Categories drive different actions.
Advertisement
Action layer
Block. Warn. Log for review. Escalate. Configurable per category.