Censerva records who changed what. Until now, that record was a link to the person's account — so removing someone from your organisation quietly blanked their name from every action they had ever taken. The entries survived; the answer to "who did this?" did not.
For a closed incident it was worse in a way that only appeared when somebody tried it: a closed incident must record who closed it, and removing that person would have left it unable to. So the removal was refused outright. In practice, anyone who had ever closed an incident could not be removed from the system at all — not when they left, and not if they asked to be.
Both are fixed. Who acted is now written onto the record itself at the moment they act, alongside the link. The link still points at the live account while it exists; the written name is what remains afterwards. A closed incident still has to name whoever closed it — that requirement has not moved — but it can now do so once the account is gone.
This also means an erasure request can finally be honoured. Where someone asks for their personal data to be removed, the name is replaced rather than deleted: the record continues to show that an incident was closed, and when, without identifying who. Erasure removes the identity, not the event — which is what an evidence trail has to keep.
Nothing was lost in the change. Records whose actor had already been removed before this existed stay unattributed; that information was gone before there was anywhere to keep it.