An illustrative scenario. What is real: collection without installing an agent, anomaly detection against a seasonal baseline (median + MAD) with deterministic ranking — no generative AI, no LLM (“AI” in ZDZCIO = Application Insights), correlation always flagged as temporal (not causal), and tamper-proof reports sealed with SHA-256 + QR.