Near-automatic exception-free attestations should be a byproduct of basic sane corpsec practices.

being key here. if you realize it's not all that sane when you start reviewing things, what happened in our case was it allowed us (there were other signals as well) to regroup on our practices and then it was painless.