Detections & incidentsSeverity, lifecycle, and dashboard workflows.LifecyclePolicy and scoring produce findings. Related findings roll up into incidents for triage—assign, comment, resolve. Severity reflects policy impact and data exposure risk.