AnomalyKit + RuntimeGuard + BehaviorGuard: layered tamper detection

Why no single-signal detector catches a real attack. Statistical anomalies + hard-edge runtime indicators + behavioral drift, fused with a sliding-window consensus policy.