Sub-ticket of PLUTO-442 Applog noise: down-tier vuln-scanner probe 404s warn->info (SCANNER_PROBE_RE). 42% of 7d warn-nav rows are scanner-class (wp-*, cgi-bin, .php[0-9], /.env*, /.git, /admin/controller, credential-json, bare /.well-known) across 3 sweeps; all correctly 404 (Next.js, no PHP/WP surface) but mis-tier as warn/navigation -> alert flood. Existing SCANNER_PATH_RE (not-found-classify ~L146) too narrow, caught 0/8 -> supersede with one evidence-anchored SCANNER_PROBE_RE in the L132 down-tier block (info/security/no-alert, drops row). Mirror ICON_PROBE_RE (3c10bb0). Must-NOT-match robots/sitemap/apple-touch-icon/real /admin/*+/api/* routes; unit-test each shape vs matchesAnyRouteTemplate before ship. Security non-event. · pluto