# What the Record May Say

The record can say that Nell was born. A free-form description of what kind of
person Nell is has nowhere to go: the vocabulary is declared, and a report must
use an admitted kind of entry before the rules will accept it.

The tests try to record that Adam is rich or dangerous. Both entries are
refused, because those kinds of assertion lie outside the constitutional
record. The refusal says nothing about Adam's wealth or conduct. It says what
this record may contain.

The admitted kinds include births and encounters, employment and teaching,
injuries and judgments, relationships, proposals, appointments, receipts and
challenges. They also include specified evidence about sources, review periods
and whether a status continues from one version of the record to the next.
Some are direct observations; others report a finding someone has already
made.

Personhood itself may be entered directly or follow from the roots in the
previous chapter. The name used at first contact may be temporary.
Standing can begin under it before a civil identity is reconciled, and a birth
entry and a first-contact name each leave civil identity unauthenticated.

## What is missing

The admitted kinds include no general field for reliability, deservingness,
productivity or predicted risk, and an institution can add one only through a
visible change to the constitution's text. The constitutional record also
leaves out any unrestricted file of someone's wealth, religion, ancestry,
politics, health or associations.

That limit leaves room for the records an operating society needs. A record
kept for a particular lawful purpose has its own permissions, access rights and
limits on use, set out in the chapter on what may be kept about you.
Permission to hold a record covers that purpose; copying its contents into
every constitutional decision about the person falls outside it.

Economic records illustrate the distinction. A contribution entry records a
payment into a named scheme; it can support a supplement above the floor, and
standing, essentials, liberty and the vote are decided without reading it.
A compensation entry records a promised payment of a named kind. A competence
entry records an authorised attestation of a function. Each speaks to one
arrangement and assesses nothing general about the person it names. Where
worker status, title, liability, licensing, taxation, credit, insolvency,
private economic power or scarcity need a decision, the constitutional record
takes the narrow, challengeable result needed for the specified purpose, and
that result must meet its route's requirements for authority and review.

Other entries have narrower reach. Recording that Hano has a family leaves his
placement where it was, and a family entry has no route to harsher confinement.
Reviewer independence needs a positive finding for the case, which an absent
parent, marriage or sibling entry leaves unmet. Recording care as employment
records work; delivery, consent and authority to decide for another person each
need evidence of their own. An adulthood entry in the required form can support
the ballot conclusion, while the legal status of adulthood originates outside
the entry.

The design still classifies. It distinguishes adjudicated acts and draws
consequences from them: severity binds the person, case and incident, and a
severity finding in one case lends nothing to placement in another. That is a
rating, and it matters for confinement. What the record excludes is a freely
writable general verdict on personal worth.

The closure has a cost. An official convinced that someone is dangerous has no
entry in which to say so. The belief reaches the person only through a properly
made finding or order, with the evidence and review its route requires, and
until then it changes nothing the rules conclude about them. The people a real
danger would harm wait for that finding, and a person served by several offices
may have to give each one the facts its own purpose needs.

## Facts and conclusions are kept apart

The record says that Hano injured another person and that the Court judged
Hano. Those are inputs. That Hano is a prisoner is a conclusion: it follows
through the injury, the judgment, the cited case and the required conviction
and custody evidence, and it also depends on the relevant protections and
grounds for refusal. An injury and a judgment are only part of the authority to
confine.

Try to bypass that route by writing directly that someone is a prisoner. The
entry is refused. So are direct assertions of public answerability, of severity
and of a credibility finding. These are reserved conclusions: a writer records
their premises, and the rules determine what follows.

Public answerability follows from an institution's public status or from a
seating by the electorate or the convocation. The Court has it through its
public-body entry; a person the convocation seated has it through that seating.
Answerability differs from permission to judge, and the later chapters
distinguish it from an examiner's authority to sign findings and from authority
for a particular public act.

Severity shows why the premises must be read together. The underlying case
needs properly made criminal proof, adjudicated defences and fair procedure.
An independently reviewed finding of grave injury or aggravated cruelty must
identify the subject, case, incident, person harmed, evidence and procedure.
Severity rests on those findings alone. A count of people injured, or a raw
entry of attack or cruelty, adds nothing to it.

In a test, a person the Court judged in a cited case has a raw attack entry
against one person and a cruelty entry against another, and severity stays
absent. It stays absent when cruelty against the person already attacked is
added. The placement chapter follows cases with properly made grave-injury and
aggravated-cruelty findings. Those findings permit consideration of secure
placement, and a separate decision must show why a less restrictive place is
insufficient. Choosing a destination and holding current authority to confine
each need more than severity.

A bare claim that the Court is broken likewise leaves the custody cases in
place. A defect in a court's jurisdiction or independence needs a properly made
disposition of the affected case, identifying the subject, offence, ground,
evidence and independent appellate actors, and the appeal is decided by actors
other than a party or the original adjudicator. Successful review ends the
affected authority in that case alone; the injury record stays, and the review
itself releases nobody. The chapter on findings about people follows that
relief.

How many people must act before a record takes effect depends on what the
record does. A record that only gives or preserves something for the person it
concerns, such as an accommodation, continuing care, access to a hearing,
interim protection or a claim that opens review, takes effect on its source's
record alone, and the independent reviewer it names owes prompt review and can
withdraw it. A record that restricts, takes, confines, finds against somebody
or gives one person power over another takes effect only after its independent
attesters and reviewer agree. Help given on one actor's record stays help: the
completed record that other rules read still needs the full procedure, so harm
gains no shortcut through it.

## One examination is not a credibility finding

A credibility finding in force keeps its subject's signature from counting
toward a new credibility finding; it leaves personhood and the floor intact.

The record holds a single examination of Esa, the examiner's only recorded act.
Esa's credibility is untouched, and so is the examiner's for having made it.
The paired route requires distinct examiners, each authorised to sign, matching
findings about the same subject, incident, ground and evidence, and positive
independence authority for that case. Permission to make a finding also checks
the signers' current disqualifications. Personal consequences require the
completed case and its historical eligibility and procedure. The chapter on
findings about people follows those conditions and the case-specific route to
restoration.

The shield case separates an accusation from the adjudication it needs. A
person has exposed an answerable official, and an accepted raw entry alleging
that the discloser deceived that official leaves the exposure without a finding
in force: the shield continues, and the prisoner conclusion stays blocked. A
raw accusation likewise falls short of a personal credibility finding, which
must bind its subject, incident, evidence and independent reviewers.

## Changing the vocabulary

A new kind of entry needs a declaration placed before its first use, and a
declaration made afterwards leaves an earlier refusal standing.
An editor can nevertheless declare new vocabulary and use it in the source.
The declaration requirement makes that a source change; it shows the change and
leaves open whether the editor had authority to make it, and whether the new
word hides a judgment that should need a decision of its own.
A proposal's declared target shows neither its effects nor authority to enact
it: the lawful route reviews the exact replacement text, as the amendment
chapter shows.



The record also changes from one version to the next. A status recorded in an
earlier version counts in the version in force only where independent witnesses
keep it there; the method's section [*Versions of the
record*](https://dhilipsiva.dev/rights-nobody-has-to-earn/read/method/#method-versions-of-the-record) sets out how. Standing works the
other way round, because it protects. An accepted later version must state that
a witnessed standing is kept.
Omitting that statement erases neither the protection nor the evidence of the
mismatch: the standing continues, and the omission is marked as a defect.

## What this cannot settle

Personhood is itself admitted vocabulary. A fabricated person entry gives a
name every floor right and the freedom to move, and a report that someone's
sentence is finished makes a person of the name it gives; a fabricated birth or
encounter does the same for any name other than a known public body's. Nothing
in the rules asks whether a human being answers to the name.

A forged or withheld adulthood entry bears directly on the ballot conclusion;
the age behind it, and any outside clock, go unverified here.

The rules forbid a direct verdict while accepting a reported finding that can
have almost the same effect. Naming the finder and requiring independent review
make responsibility for that finding explicit. The distinction between one
examination and a credibility finding holds for the case above; it leaves open
what an investigation costs the person investigated, and what a single finding
may do elsewhere in the design.

The defect marker for a missing standing statement shows a mismatch between
recorded versions and leaves its cause open. The rules lack any representation
of a lawful retirement of the protected entry, so the marker reports the
statement as missing even where an outside account would call the removal
proper. It falls to people outside the record to find an encounter nobody
reports, detect a deletion before the compared records, establish an honest
witness or make the next record arrive.

## The child with nobody

Nell's birth entry is admitted, and personhood follows. The test also tries to
enter a classification of Nell as vulnerable, and the closed vocabulary refuses
it as an unknown word before any rule could read it. Nell's protection follows
from personhood alone, and nothing adverse follows from the birth entry:
Nell's credibility is untouched.

With the standing root present, the next question is what every person is owed.

*Run it:* the companion runs this chapter's cases on your own device, at
[dhilipsiva.dev/rights-nobody-has-to-earn/cases](https://dhilipsiva.dev/rights-nobody-has-to-earn/cases/#chapter-2).

## Argument: Why the record is closed by name

*The companion states these rules as Articles [2](https://dhilipsiva.dev/rights-nobody-has-to-earn/constitution/#article-2) and [31](https://dhilipsiva.dev/rights-nobody-has-to-earn/constitution/#article-31).*

I close the record by name because an entry about a person travels. Once an
official or a system may write that someone is unreliable, undeserving or a
risk, the next office reads that entry as a fact another office checked, and
the person meets a conclusion with no act behind it to contest. Where files and
labels have travelled, the people described bore the error. Australia's Royal
Commission found that Robodebt, which raised welfare debts by averaging income
data from the tax office, was "a crude and cruel mechanism, neither fair nor
legal"; some 381,000 people were refunded.[^robodebt] The Dutch
childcare-benefits affair, which opens Part II, is another. Virginia Eubanks
argues that the most invasive and punitive automated systems are aimed at the
poor.[^eubanks] Admitting only declared kinds of entry, and reserving
confinement, answerability, severity and credibility findings as conclusions
that must follow from recorded premises, ties each adverse conclusion to an act
somebody recorded and a finder who can be named. Helen Nissenbaum's contextual
integrity names the norm: information should flow by the norms of its
context.[^context]

The strongest alternative is the integrated case record: a joined account of
what agencies know, used with discretion and risk-based targeting. Governments
hold it when they build systems such as SyRI, the Dutch state's risk-indication
system for benefit, allowance and tax fraud. It promises that a person tells
their story once, that a need seen in one office reaches another, and that
fraud diverting money from entitled people is found. Its best evidence is the
2020 judgment against SyRI: the District Court of The Hague held the
legislation incompatible with Article 8(2) of the European Convention on Human
Rights, yet found the instrument neither unsuitable nor disproportionate in
itself, and faulted its safeguards, transparency and verifiability.[^syri]
European data protection law bounds it without closing the file: it bars
further processing incompatible with a record's purpose, and gives a right
against decisions based solely on automated processing that significantly
affect a person, with exceptions.[^gdpr]

Against that alternative my rule has a price. People who need several services
repeat their account, because each record serves its own purpose; the cost
falls hardest on those who struggle to explain themselves or need someone to
speak for them. A need written in one office's file can go unseen by the next.
An official's accurate suspicion must become a properly made finding before it
counts against anyone, and the people it would protect wait meanwhile. I accept
that price because an open file's errors arrive as conclusions a person must
disprove, and the closed record makes the office bring a properly made finding
first.

I would reconsider if integrated records with contest before effect and
independent review were shown, for the people least able to contest, to produce
fewer wrongful adverse decisions than purpose-bound records, or if people whose
need sat in one office's file were shown to go unfound for want of a joined
account.

[^robodebt]: Royal Commission into the Robodebt Scheme,
    [*Report*](https://robodebt.royalcommission.gov.au/publications/report)
    (7 July 2023), vol. 1, pp. xxvi–xxix.

[^eubanks]: Virginia Eubanks, [*Automating Inequality: How High-Tech Tools
    Profile, Police, and Punish the Poor*](https://us.macmillan.com/books/9781250074317/automatinginequality/)
    (New York: St. Martin's Press, 2018).

[^context]: Helen Nissenbaum, ["Privacy as Contextual
    Integrity"](https://digitalcommons.law.uw.edu/wlr/vol79/iss1/10),
    *Washington Law Review* 79 (2004), 119; *Privacy in Context: Technology,
    Policy, and the Integrity of Social Life* (Stanford, CA: Stanford
    University Press, 2010), ch. 7, <https://doi.org/10.1515/9780804772891>.

[^syri]: District Court of The Hague, 5 February 2020,
    [ECLI:NL:RBDHA:2020:865](https://uitspraken.rechtspraak.nl/details?id=ECLI:NL:RBDHA:2020:865)
    (English translation ECLI:NL:RBDHA:2020:1878), paras 6.77, 6.86, 6.95 and
    7.2.

[^gdpr]: General Data Protection Regulation, Regulation (EU) 2016/679,
    [Articles 5(1)(b) and 22](https://eur-lex.europa.eu/eli/reg/2016/679/oj).

---

By dhilipsiva. Prose: CC BY 4.0.

Canonical: https://dhilipsiva.dev/rights-nobody-has-to-earn/read/02-what-the-record-may-say/

Source: https://github.com/dhilipsiva/rights-nobody-has-to-earn/blob/main/book-1/02-what-the-record-may-say.md