Legion Security wants to learn a SOC's habits before it takes over its chores. A browser extension watches the work, draws the map, and asks for the keys only when the team is ready.