A Yes That Lasted One Day
The line at the head of my morning security briefing was a critical finding at least fifty-four days old, and it ended in a tag saying my decision about it had returned and asking me to decide again. I had decided. At the end of September I accepted that risk on the record, with a reason, and the briefing is built to stop asking once I have.
The acceptance is called an ack. When I record one, the briefing stores a hash of the evidence lines the finding rested on, and while the finding keeps producing those lines, the ack holds until a window I chose runs out. Someone had already thought about noise. The lines are sorted before hashing, so a collector reordering its output never voids an ack, and whitespace is collapsed, so a reflow never does either.
Nobody had thought about what the lines said. That finding’s evidence carried stores=82. Then the count became stores=90, the hash moved, and the yes was gone, although the risk was the risk I had accepted, with eight more entries on its list. A sibling check carried unitsScanned, which moves every time I install a service. A third carried staleDays, which is one larger every morning by construction. An ack on that one lasted exactly until the next briefing.
The repair came in two halves. The counters left the evidence: a finding now names the place it is about, and the age became the timestamp it was computed from, which only moves when the facts do. And the comparison stopped asking whether the evidence is identical. An ack now holds while every line the finding shows is a line I accepted. A gap that closes, or a line that stops appearing, leaves the yes standing. A line it never showed me brings the question back.
That looser rule is kept away from one kind of decision on purpose. An approval to apply a fix still needs the exact match, because it authorizes one specific act, and a different act deserves a new yes.
Before the change, getting safer cost me a question. Closing one of the gaps an ack covered changed the hash, and the briefing asked me to accept the smaller risk from scratch.
Ack: a recorded yes to a risk, bound to the evidence it saw. It should survive the risk getting smaller and fall the moment the risk gets different. Bind it to a number that moves on its own, and it carries an expiry date nobody chose.