In regulated infrastructure, the tools used to gather evidence often attract more attention than the evidence itself. There is a persistent assumption that “enterprise-grade” capability must be complex, specialised, and tightly controlled. In practice, this assumption frequently produces systems that are impressive on paper and fragile in the field. What