[#20] Large-scale emergency escalation reserve for mass amnestic deployment, evacuation, or new containment infrastructure (one-time/reserve).

[#17] Long-term R&D lab buildout, research instruments, and initial experiments/equipment (#17).

[#3] Retainer/initial actions for international counsel, registrar pressure, and possible seizure/securing domains (one-time legal/takedown costs).

[#2, #7, #8, #9, #10, #11, #16, #19, #23, #26] Sinkhole/high-availability servers and racks (#2), specialized recording & sensing hardware (#7), safes/chain-of-custody hardware (#8), MTF & field vehicles/kit (#9, #10), forensic tooling (#11), social/web tooling (#16), memetic-protective gear (#19), evidence destruction hardware (#23), ticket-prevention devices/protocol hardware (#26).

[#1] Legal/operational negotiations, contracts, and initial BGP/DNS-level blocking implementation coordination with Tier-1 carriers (one-time portion).

[#5, #12, #18] Honeypot lab Faraday/shielding and structural setup (#5), secure pharmacy/controlled storage setup (#12), high-security archival vault construction (#18).

[#15] Initial assets for cover identities, shell sites, and compensatory budget setup (one-time).

[#21] Initial onboarding, background checks, and clearance processing setup costs (one-time).

[#13] Initial medical readiness contracts, medkit purchases, ambulance/evacuation retainer setup (one-time).

[#25] One-time costs to set up formal MOUs and liaison frameworks with CERTs / law enforcement (#25).

[#6] Initial specialist training for weekly researcher entry (one-time).

[#4, #6, #9, #11, #12, #13, #14, #17, #21, #16, #27] Aggregated wages for SOC analysts and tooling support (#4), weekly researcher salary (#6), MTF Gamma-5 personnel (#9), forensic staff (#11), medical staff for amnestic administration (#12) and medical readiness (#13), therapists and reunification staff (#14), R&D staff (#17), HR/security staff (#21), social/web monitoring staff (#16), and audit/oversight contractors (#27).

[#15, #22] Annual cover-up/compensatory reserve and minor incident payouts (#15), and insurance/legal-defense retainers and liability mitigation (#22).

[#28] Administrative overhead, pro-rated facilities/utilities/IT support (10–15% modeled at midpoint).

[#2, #4, #11, #16, #17, #27] Non-wage operations and tooling for sinkhole/DNS monitoring (#2), SOC tooling & non-wage ops (#4), forensic program non-wage budget (#11), web/social monitoring tooling (#16), non-wage R&D operational costs (#17), and recurring audit/compliance costs (#27).

[#10, #24, #9] Field-deployment vehicle operations and maintenance (#10), witness relocation and secure travel budgets (#24), MTF non-wage transport/operational logistics (#9).

[#1] Ongoing SLA fees, international coordination, and maintenance for ISP backbone/DNS-level blocking (annualized).

[#25] Ongoing liaison, CERT coordination, joint exercises, and travel for coordination with government CERTs / law enforcement.

[#2, #10, #11, #16] Small operational reserve for unforeseen recurring costs tied to sinkhole bandwidth/colocation, field ops spikes, forensic surge, and additional web-takedown demand.

[#7, #8, #12, #19, #23, #26] Consumables and disposables: recording storage and replacement (#7), evidence consumables and disposal (#8), amnestic drug purchases and consumables (#12), memetic-protection consumables and replacements (#19), destruction consumables (#23), ticket-prevention consumables (#26).

[#21] Recurring non-wage HR program costs: ongoing background checks, polygraphs, reinvestigation fees.

[#5, #18, #23] Recurring maintenance for honeypot/trigger lab infrastructure (#5), archival vault upkeep (#18), and destruction equipment maintenance (#23).