- WARN is auto-detected by RiskCheckEngine (riskPct > 80), not configured in rules - Each rule simply defines: type + metric + condition + threshold + unit -> 封号 - Card always shows red left border and red '封号' arrow, no action selector - Presets reduced to 7 kill-only templates, no WARN presets