I guess in my mind signal == attacks, but I guess there's also value in having reports when your policy broke things if you don't have other methods for detecti

I guess in my mind signal == attacks, but I guess there's also value in having reports when your policy broke things if you don't have other methods for detecting that, or if your integration tests disable CSP.