Trust architecture
Signals are evidence, not verdicts
Request velocity, failed challenges, browser context, and short-lived session behavior contribute bounded weights.
- VPN is not an automatic block
- Missing metadata is bounded
- Risk remains explainable