What can extend the 30-day target?

“The most common dependencies are unavailable APIs, delayed data access, custom security requirements, and stakeholder or procurement reviews. We identify these during discovery and make the critical path visible.”