A fraud detection team currently runs a nightly batch job that aggregates transaction data and retrains a model every 24 hours. A new business requirement demands that the model detect fraud within 10 seconds of transaction. Which architectural change is strictly required, and which is optional?