budget constrained; approved for one additional hire (not enough) 2. **Implement a full ML replacement system** — capital-intensive, long implementation, significant regulatory documentation burden 3. **Deploy an ML triage layer** — a scoring model that prioritizes the existing alert queue without r