drop android notification service logs · detect cooldown bypass + burst suppression · runs locally
drop android notification service logs · local only
heuristic screener · vendor schema varies · not definitive proof