A live system may favor predictable behavior and a fixed set of event types because operators need a clear action. What the Live Path Must DoA live detection path works best when every step supports a fast, repeatable response. The live model may need strict change control because a small update can affect alert timing. The live path needs fast processing, fixed rules, steady timing, and a narrow set of urgent detections. The review path needs more context, richer models, longer clips, and room for human judgment.