Quarantine and appeals

Risk decisions change workflow state, never immutable package evidence.