Flag risk-tagged player profiles for security review before SLAs lapse

Your inbound customer webhooks lack normalized risk markers, causing delayed investigations and SLA misses. This delivers clear flagged profiles to security and operations for triage before SLAs lapse.