One incident, real fixture data: vouched, compromised, revoked — not the whole fleet.
Hollow ring = revocation, applied the moment trust was pulled. Replay removes 0 further records — idempotent.
| departments reached | purge-by-user destroys | Custody destroys | Custody saves |
|---|---|---|---|
| 1 / 5 | 20% | 1% | 19% |
| 2 / 5 | 40% | 3% | 37% |
| 3 / 5 | 60% | 4% | 56% |
| 4 / 5 | 80% | 5% | 75% |
| 5 / 5 | 100% | 7% | 93% |