Violations no longer rely on the "source" or "namespace"

Tests still fail due to this weird token list bug.