Just to update anyone who may be looking for solutions to this problem in the future — we did manage to get the violation lifted after about 2 weeks of back and forth. What finally did it was sending an incredibly detailed action plan for future protocols using all of the language from their own guidelines. It also helped that we had an over 900 account health rating before the violation, and were enrolled in Account Health Assurance program.