A Boolean PII Flag Is Not Enough

How to Guarantee You Never Ship