Data security inside federal agencies and highly regulated commercial organizations faces a persistent, fundamental paradox: security policies demand that sensitive data, such as Controlled Unclassified Information (CUI), be accurately identified, marked, and protected, yet the human beings creating that data routinely struggle to execute those marking rles accurately.