Friction on purpose¶
The boardroom at the Home is the long table with the mismatched chairs. On the Friday morning it held the Director, the chair of trustees, the DPO, the IT manager, the architect, the Head of Fundraising, the Head of Programmes, the Head of Care, and, at the far end with a notebook, Ponder Stibbons, attending as Purple Lantern’s majority shareholder to keep the minutes. Mrs. Clodpull was not on the list. She brought the tea and stayed, on the grounds that she was already in the room, and nobody who has met her argued.
The IT manager had heard the report the night before and asked the consultant to open with its first line. None of this argues against deploying the thing. It argues that the frictions removed were performing governance for free, and that the ones performing real work can be reinstated deliberately, at a price, now that they no longer come with the furniture. One by one the reinstatements are another catalogue of separately arriving bills. Grouped, they are three restorations.
Restoration |
What it buys back |
|---|---|
provenance |
the path from answer back to evidence |
boundaries |
reach priced at the aggregate, an exit kept open |
discipline |
failure that announces itself again |
Provenance¶
An answer stays attached to what produced it. Derived artefacts inherit their parents’ obligations. Retention, hold and privilege travel with the content rather than the file, which the DPO had written into the register on the Monday and wanted the board to know she had. The reader surfaces the authoritative version instead of flattening the rest, and reports a contradiction as a contradiction rather than resolving it into confidence: the intake policy and Mrs. Clodpull’s two questions, presented as two things, not one. The oracle that keeps none gets a register. Answers are logged with model version, prompt state and index state, so the question of why something was believed has somewhere to go, and model updates are treated as releases, with the regression discipline the word implies.
Provenance of judgement gets bought from the people the savings line removes, before they go: the weighting elicited and recorded, the exception catalogue walked through case by case, with the 2018 chimera and the bucket in it, introductions made in person to whoever inherits the work. Most of it will not survive the transfer, because most of it never does. What cannot be transferred can at least be priced, which would make the board paper honest, and honesty about that line item has a way of changing the headcount decision it was meant to justify. The Head of Programmes, who had written the line, asked whether the two members of staff with the spreadsheet counted as judgement. The consultant said that they were the only people at the Home who knew what the CRM got wrong on a bad day, and that this was the definition.
Boundaries¶
Access priced at the aggregate replaces per-file grants issued one file at a time. The procurement list is attenuation beside the amplifier: fewer authoritative versions, a small writable surface, a segmented estate, and instruction surfaces guarded like the administrative interfaces they have become, which means, at minimum, not in the IT folder next to the photographs. The estate keeps a human-navigable spine, maintained the way staircases are maintained in buildings with lifts, so the option of operating without the tool stops expiring unnoticed. The Home has just carried its estate down one staircase and knows what the stairs are for.
Then the consultant came to reach, and made the point once. An organisation with a legitimate reason to be everywhere, that talks to everyone and keeps notes, holds an asset that a single query can now assemble and that several parties would value, and nothing in phase two distinguishes those parties by login. Connecting thirty chapters’ drives to one reader builds the map in one place, and building it in one place is the only thing that has ever been needed for it to be taken. The boundary the second phase needs is the decision not to connect the field testimony at all, or to connect it segmented, chapter by chapter, so that the map stays as it has always been, assembled in nobody’s system and read only by those who know it is worth reading.
Nobody at the table asked which parties. The DPO said, for the record, that there was no such arrangement. The IT manager studied the ceiling. The chair of trustees said that she had understood the point, and that it was well made, and moved on. Ponder wrote “a discussion of reach”, underlined it, and left the rest of the line blank.
Discipline¶
Golden question sets, curated and versioned, run on schedule and on change, starting with the diet sheets. Retrieval quality becomes a metric with an owner rather than an anecdote with a thread. Drift detection catches the slow silent losses. Answers are sampled by people qualified to disagree with them, and the Home has several, one of them a troll. Documents that can end in a work order pass a review gate first. A component that fails in prose gets incident review and rollback. Originals are read periodically, on purpose, by people whose judgement the Home intends to keep, and hygiene is given named owners while owners still exist. The security side itemises quickly: injection testing as a practice, change control on prompts, monitoring of agent actions among the lines. Each line is ordinary work, and the sum is a second security programme standing beside the existing one, for a system that was bought as a productivity feature. The roles all this implies belong in the board paper at the start rather than in year two; the titles are new, and the competence is largely the competence on the savings line, hired back at contractor rates under different names. The Head of Care asked whether the records assistant could simply be re-advertised. The consultant said that would be cheaper than the alternative, and that the alternative was what the paper currently proposed.
The discipline entries come in an order: cheap early and expensive late. Curated ingestion before broad ingestion, an ownership model before popularity, evaluation before the baseline becomes embarrassing, golden questions before the first model update rather than after the first incident. Reliability debt is the line on the bill an organisation gets to decline at the start, and only at the start. The rest get paid. When, and out of whose budget, is settled later.
What the board did¶
The board did three things before lunch. Phase two was deferred, and the chapters’ drives are not to be connected until the boundaries exist, which means until the Home has decided, in writing, what the reader may never be pointed at. The pilot continues in the Ankh-Morpork building on curated ingestion, with the golden questions, the register for the oracle and the ownership model as conditions of continuing, and the records assistant’s post comes off the savings line and goes back on the vacancies list with a different title and the same job. And the Director asked for a paper on the rest.[1]