Recurring Signature Detector

Detects incident signatures (common keyword patterns, type/component combinations) that repeat across multiple tickets. For example, if "auth timeout" appears in 12 separate tickets over the quarter, you have one underlying problem masquerading as twelve.