Use when finishing any guard, check, battery, or safe default; when a shipped check turns out to be opt-in or missing from CI; when a safe mechanism exists but the unsafe default still ships; or when asking why a protection did not fire. Not before the mechanism exists.
