# E9.M4 — IntegrityAndAbuseResponse

## Summary

| Field | Value |
|--------|--------|
| **Module ID** | E9.M4 |
| **Epic** | [Epic 9 — LiveOps / Integrity](../epics/epic_09_liveops_integrity.md) |
| **Stage target** | Pre-production |
| **Status** | Planned (see [dependency register](module_dependency_register.md)) |

## Purpose

Correlate exploit/bot signals from [E9.M1](E9_M1_TelemetryEventSchema.md) to `IncidentTicket` and `EnforcementAction` with audit trail.

## Responsibilities

- Ingest `IntegritySignal`; open/close incidents; log `EnforcementAction` for moderation and economy response.

## Key contracts

| Contract | Role |
|----------|------|
| `IntegritySignal` | Detection pipeline output. |
| `IncidentTicket` | Triage record. |
| `EnforcementAction` | Ban, rollback, warning with actor. |

## Module dependencies

- **E9.M1** — TelemetryEventSchema.

## Dependents (by design)

- **E6.M3** — LossPenaltyAndAntiGriefRules.
- **E8.M4** — ChatModerationAndReporting.

## Related implementation slices

Epic 9 **Slice 3** — known exploit replay produces ticket + action log; `integrity_signal`, `incident_open`, `enforcement_action`.

## Source anchors

- Master plan: [`neon_sprawl_vision.plan.md`](../../../neon_sprawl_vision.plan.md) — Epic 9.
- [Module dependency register](module_dependency_register.md)