Anomaly detection inverts aito.._predict: instead of asking “what's the most likely value?” we ask “how likely is the value that's actually there?”. A PO from Wärtsilä Components coded to a non-Production cost-centre, or a production purchase posted to a wildly off-pattern account, returns a low probability — that's the anomaly score. No rules, no thresholds to maintain.