Every guard, alert and CI gate gets one deliberate sabotage run to prove it catches, before anyone relies on it. Provisioned is not working. Even a fail-safe guard needs firing once, or it silently never delivers the benefit it exists for. Say so in the record when you fire one.