Anomaly log

RAG fallback cases, OCR failures, and low-confidence extractions flagged by the pipeline.