Demo mode— data is preseeded. Actions like loop-kill, Slack routing, and live detection require real API keys and won't fire here.