A check failing across many assets is a programme problem, not an agent problem — fix it once at the policy level.