A security engineer is triaging CodeQL code scanning alerts in a repository. One alert flags a SQL injection risk, but after review the engineer confirms the flagged input is fully sanitized by an internal wrapper that CodeQL's model does not recognize, so the alert does not represent a real vulnerability. The engineer wants to dismiss the alert in a way that accurately reflects this determination and helps improve future triage reporting. Which dismissal reason should be selected?