That makes sense. If the wall-clock impact is negligible, keeping dual validation enabled for longer sounds like a sensible safety net while the implementation matures.

Thanks for the clarification.