Stop operational use when data integrity, workflow assumptions, or model behavior crosses a safety boundary.
Operational meaning: The system should not continue in its current state until review and corrective action are complete.
Next action: Escalate to incident workflow, review evidence, and approve rollback or remediation before restart.