They’re using classifiers for a lot of this stuff separate from the actual model.

I’ve had the model agree that certain prohibited actions or downgrades were false positives and tell me to start a new session.

For some things, once you’ve tripped the tripwire, that session is cooked.