So are you saying that "clean up" and suspicious link notices only happen when a site hits a threshold. A state machine of sorts?

Frankly, I think "spammy link penalties" is an approach that cannot work long term, any negative weight put on links is too easy to game by competitors.