So, I've actually implemented a system like this for my work. It's completely non-shocking to me that a unchecked and unvalided "reason" field ends up with nothing but garbage in it to get past the software checks.

My 3 "words" requirement because managers wanted more than just "caus" ended up with workers simply putting in "a o k".

These systems need more validation and teeth than simply letting the officers enter whatever text allows them to search. A case number isn't enough, IMO. There needs to be an actual warrant which the system checks. But further, misuse needs to be prosecuted (I know, fat chance).