A practical reset for blue-team practitioners: stop treating red-team exercises like contests, build signal that survives realistic variation, and treat users with empathy, curiosity, and customer-service discipline.