Augments an investigation case with derived context features such as device familiarity and account history signals, and merges external reference data. WHEN: "enrich the case", "add context to transaction", "look up device history", "gather reference data", "prepare case for scoring".