From e253c7222c1d2d3301cbf75721bb66e3368c858c Mon Sep 17 00:00:00 2001
From: mblanke <mblanke@gmail.com>
Date: Wed, 24 Dec 2025 12:59:02 -0500
Subject: [PATCH] Clarify visual distinction between findings and alerts

---
 ui/ALERT_VS_FINDING.md | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 ui/ALERT_VS_FINDING.md

diff --git a/ui/ALERT_VS_FINDING.md b/ui/ALERT_VS_FINDING.md
new file mode 100644
index 0000000..f1e1463
--- /dev/null
+++ b/ui/ALERT_VS_FINDING.md
@@ -0,0 +1,13 @@
+Finding:
+- Analytical result
+- Appears in tables
+- Can exist without alert
+
+Alert:
+- Escalated finding
+- Higher visual emphasis
+- Requires acknowledgment or action
+
+Rule:
+An alert is always derived from a finding.
+No alert may exist without a finding.