Why this record exists at all
The interesting part is not that a promotion was reversed. It is that the argument for the promotion was true, and still wrong — and that the reversal had to be written down, because a future reader encountering "this tool makes zero network calls, so it is safe to expose" would otherwise find it persuasive for the same reasons.
Recording the counter-decision is cheaper than re-deriving it. That is the whole economics of a decisions surface.
The general form
Cost is a permission, not a qualification. Cheap to serve tells you nothing about whether a reader will understand what they are looking at, whether the documentation describes it accurately, or whether anyone has tried it cold.
The corollary is a process rule rather than a product one: a capability flip that does not also move the documents that describe capabilities is incomplete, and the gap will be discovered by a visitor rather than by CI.
What made it detectable in the end
A manual UAT case existed and covered exactly this. It was manual, so nothing ran it on the promotion commit. The durable fix is not "remember to run the case" — it is that a claim of this shape needs an automated counterpart, or it is not a check.