* Default is --dry-run. Writes require an explicit --write. * Target is a NEW collection (default ``scam_pattern_signatures_8b``).