"""The model layer: a deterministic program model that arbitrates detector claims. The taxonomy routes work, the candidate enumerator feeds the `suspicion` band, the specs carry the security vocabularies, and (from group 2) the CPG-backed taint and dominance checks establish the rungs above it. """ from __future__ import annotations