Adding a datapoint from a Series A fintech I advised. A thin rules layer filtered 80% of noisy alerts. Design the rollout so rollback takes minutes, not hours.