Route work by urgency, account tier, and dependency risk. Trigger early intervention before breach windows close.

Audit each reroute with reason codes to improve policies over time.