Behavior baselines before zero-day hype

ML-assisted scoring for identities and data paths static rules miss.

Anomaly lanes complement authorized testing. When a novel technique appears, operators already know normal for crown-jewel workloads.