Should Firms Distinguish Between Human Errors and Deliberate Rule Evasion?

Not every account violation necessarily reflects an attempt to manipulate a system. Would it be reasonable for firms to distinguish accidental operational mistakes from deliberate attempts to bypass restrictions? How could they maintain consistent enforcement while allowing fair reviews of genuine errors?