Interface ThreatSignal

interface ThreatSignal {
    category:
        | "recon"
        | "sensitive_read"
        | "outbound"
        | "privilege"
        | "persistence"
        | "policy_bypass";
    confidence: number;
    evidence: string;
    weight: number;
}