## Lesson — Limit SARIF output to error-severity findings

**Tags:** sarif, ci-cd, dx
**Scope:** packages/core/src/run-compiled-rules.ts

Restricting SARIF output to error-severity findings prevents PR reviews from being overwhelmed by probationary warnings, effectively reducing alert fatigue in security dashboards.
