A violation can happen in a queue for a few seconds / minutes. The check does the violation take place for example 5 minutes before sending a notification can prevent false positives or unnecessary high thresholds.