//! Detection pipeline — read logs, find attackers.
//!
//! Tails log files (or the systemd journal), matches lines against
//! per-jail filter patterns, and emits [`watcher::Failure`] events.
/// Log line timestamp parsing.
/// Built-in filter templates for common services.
/// IP allowlist and local-address detection.
/// Systemd journal log source.
/// Two-phase log matching engine.
/// Pattern compilation and `<HOST>` expansion.
/// Log file tailer with rotation detection.