Every lethal action the floor refused — provable, not just counted. The floor records a content-addressed receipt for each refusal; this is the visible half. A denial is itself a proof: fail-closed is not enough — it must be seen.