Research questionHow can live-streaming risk detectors connect recurring behavior across sessions without sacrificing real-time response?Harmful behavior in live streams may emerge gradually and recur across seemingly unrelated sessions. Detectors that assess sessions independently can miss these dispersed patterns, while incorporating broader history can threaten timely response.