Cases where the spec already prohibited the AI's call. Collected — not auto-patched. Patterns crossing the threshold (10+) are flagged for systemic fix (prompt, inspectability gate, or model swap) instead of additional defensive spec lines.