Remediation workflow

Suggestions are generated, reviewed, and then approved or rejected. Human reviewers remain the release gate for ambiguous findings.