Tuning. Thresholds go stale, hooks get noisy, playbooks stop matching reality. I retune hooks, digests, alerts and prompts against what your stack looks like now. Cutting false positives is most of this, and it is the difference between a tool your team reads and one they mute.