This is the mechanism, right here, in one shop.
Sanctions almost never bite because of the rule. They bite because ten thousand compliance officers all decide independently not to risk it, and there is no appeal against a decision nobody formally made.
I am sorry about your brackets. I mean that.