Why do a hundred failing traces need to become one thing to look at?

Every classifier writes one finding per cause, keyed on that cause, so repeat firings attach to the same finding instead of spawning a duplicate beside it. A hundred traces tripping the same pattern collapse into a single row before a case ever opens.

A case then points at exactly one finding, with a bounded set of the flagged traces attached as evidence rather than paraphrased into a count. You still see the scale of it, but as context on one thing to read rather than a hundred pings to dismiss one at a time.

The collapse happens before triage, not instead of it. Grouping a hundred traces into one finding doesn’t make that finding real: triage still has to rule it sound, and a finding ruled artifact or unclear closes without a case.