Purple Team Is Not a Third Squad — It’s How Red and Blue Prove Detection Works

The red team report lands with tuning recommendations; the detection engineer still needs a live run to learn which alerts actually fire.