The market for commercial cyber intrusion capabilities (CCICs) is moving faster than the frameworks designed to govern it. What began as a niche ecosystem of surveillance vendors has evolved into a sprawling, fragmented industry. While …