Searching protocol for "incident-investigation"
Detect behavioral drift and alignment degradation over time.