A migration refused when the record and the files disagree is the property that makes a schema trustworthy months later. The test asserted it without naming the decision, so an audit of which decisions are defended could not see it. novox/hq ADR 0017.