[#1, #2, #3, #4, #6, #7, #9, #17, #19, #23, #27, #29, #30] Primary and replica storage arrays, model-weight storage, air-gapped switches and networking appliances, HSM appliances, GPU/TPU compute cluster, secure dev workstations, media destruction/shredders, IDS/monitoring appliances, PPE procurement, tamper-evident hardware, integrity tooling, and archival purchase.

[#18, #26] Physical site modifications, vaults, EM/structural hardening and backup generator/CRAC installation at major hosting sites.

[#25] Capital reserve for catastrophic scenarios as recommended ($1M–$10M range).

[#10] Development/certification of visualization-blocking middleware and redaction/auditing tooling (initial development/procurement and VMC-certification effort).

[#11, #12, #13] Salaries for HMCL supervisor and containment leads, containment team FTEs, ML/DevOps/IT engineering staff, and dedicated physical security/guards.

[#22] Annual allocation to a reserved fund for breach remediation, emergency mobilization, replacement hardware and recovery operations.

[#5] Secure physical synchronization (encrypted media duplication, armored courier/cleared transport, chain-of-custody) for biweekly primary syncs and weekly SCP-3334-2 syncs.

[#14] MTF Mu-4 specialized readiness, training, equipment, and standby rotation costs.

[#21] Ongoing R&D, dataset curation, validation protocol development, and experiment budgeting for MEDUSA augmentations.

[#8] Electricity, cooling, spare hardware, warranty/maintenance and replacement for GPU/TPU clusters used for training and validation.

[#18, #26] Maintenance contracts for backup generators/CRAC, fuel contracts, and vault upkeep across primary & replica sites.

[#20] Legal retainers, cover procurement/contract obfuscation, leak response retainer and plausible-deniability operations.

[#16] Regular internal/external audits, memetic safety certifications, and red-team adversarial testing.

[#25] Specialty insurance premium / captive insurance costs and ongoing risk management program expenses.

[#19] SIEM licenses, logging storage costs, IDS/IPS subscriptions and analyst staffing for continuous monitoring.

[#15] Psychological screening, periodic monitoring, counseling, post-exposure therapy and contingency treatments for staff exposed to VMC hazards.

[#9, #17, #23, #27, #30] Consumables for secure workstations/endpoint management, media destruction consumables, PPE replacements, tamper-evident seals operations, and archival storage fees.

[#24] Creation/delivery of training curricula, refresher courses, simulation exercises, and formal certifications for VMC handling SOPs.

[#10] Ongoing maintenance, updates, audits and certification testing of redaction/visualization-blocking middleware and audit tooling.

[#4] Support and maintenance for isolated switches, jump hosts, one-way data diodes, ACLs and hardened firewall appliances.

[#28] Licenses, administrative overhead, and tools for temporary encrypted dev copies and time-limited test environments.

[#29] Recurring integrity scans, cryptographic verification jobs, Merkle-manifest maintenance and forensic tooling upkeep.

[#6] HSM/KMS support, audits, and secure key custodianship staffing.