"""Synthetic learning data only. No files, network or credentials are accessed."""
from collections import Counter

events = [
    {"user": "demo-user-A", "result": "failed"},
    {"user": "demo-user-A", "result": "failed"},
    {"user": "demo-user-A", "result": "success"},
    {"user": "demo-user-B", "result": "failed"},
    {"user": "demo-user-C", "result": "success"},
    {"user": "demo-user-A", "result": "failed"},
]
threshold = 3
failed = [event for event in events if event["result"] == "failed"]
counts = Counter(event["user"] for event in failed)
print("Rows:", len(events))
print("Failed logins:", len(failed))
print("Successes:", len(events) - len(failed))
print("For review:", {user: total for user, total in counts.items() if total >= threshold})
print("A review flag is not proof of an attack.")