Use during validator incidents for slashing-risk assessment, forensics, recovery, and external verification.