Offboarding checklists fail for a structural reason: the list has eleven owners and no deadline. The fix is to make one event revoke everything that depended on it.