Juggling risk, regulation, and analytics—while keeping model assumptions in check and navigating the twists of regulatory logic.