Detection feeds diagnosis. Diagnosis gates remediation. Remediation is followed by verification. Each step remains auditable.