#detection

Detection and response: the smoke alarm, not the lock

“ML anomaly detection is the smoke alarm, not the lock. It tells you something's off — it doesn't act. Identity and the revoke runbook are what act.”