src/security/anomalyEngine.js

import IsolationForest from "ml-isolation-forest";

let model = null;

export function trainModel(data) {
  model = new IsolationForest({ contamination: 0.02 });
  model.fit(data);
}

export function isAnomaly(vec) {
  if (!model) return false;
  return model.predict([vec])[0] === -1;
}