Capban Degraded Mode

%% CapBan — degrade toward safety, recover deterministically. It keeps protecting
%% the system while its own dependencies fail, and restores itself without heroics.
flowchart TB
    EV["Events"] --> SW["Score windows"] --> DEC["Decisions"] --> ENF["Enforce bans"]
    SW -. "store down" .-> BUF["Degraded mode:<br/>buffer events (memory ring)<br/>keep enforcing cached bans"]
    BUF -. "store recovers" .-> RPL["Replay buffered events"]
    ENF -. "enforcer fails 3×" .-> CB["Circuit breaker opens:<br/>alert · manual-ban via API"]
    CB -. "enforcer recovers" .-> REAP["Re-apply missed bans"]
    RST["On restart"] --> REC["Reconcile bans vs firewall<br/>(idempotent · remove orphans)"]