Your question is Operating Through Shifting Requirements. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
You're asked to lead a security engineering initiative where the initial goal is clear, but the detailed requirements keep changing as new information comes in from users, operators, and leadership. You need to make progress without waiting for perfect clarity, while avoiding wasted work and keeping stakeholders aligned.
How do you operate when requirements are unclear or rapidly shifting?