Each lock model is different, the RBoyApps DTH take that into consideration. Most Schlage locks don’t allow users to configure the number of retries before the lock sends an invalid code notification to the hub. The default is 4 or 5 tries (depending upon the model), so you will need to enter 4 or 5 invalid entries before the lock sends an invalid notification. For models that support custom number of invalid entries you can configure them through the RBoy Device handler settings in the ST app.
As for the motion, yes you’re correct once the lock sends the tamper notification (not for invalid codes by things like break in, fire, tampering etc) the DH will convert that into a motion event / tamper event and report it to ST accordingly.