Proven exit

An exit demonstrated by rehearsal rather than described in a contract. The proof has a shape: a signed bundle with a complete inventory, a verifier the recipient runs from their own trusted copy rather than the one shipped inside the package, and a restore exercised on a clean host where a lying installer and a self-attesting restore are required to fail. The same discipline the seed vault applies to archives, turned on a vendor relationship, and the ground on which a long commitment becomes cheap to make.