An institution can be built to hear every appeal and still be arranged so that hearing them is the most expensive thing it does.
The last three essays in this series drew the machinery of correction. Dependence Without Domination established the condition: people exercise agency through institutions they depend on, so authority is a permanent fact, and the political question is whether dependence stays compatible with agency or hardens into domination. The Rule Is Never on Trial established the instrument: an appeal re-runs one decision against the same criteria; putting the criteria themselves on trial takes a different, rarer mechanism. Stop the Machine, Not the Person established the boundary conditions: which promises a fallible institution must give up when they conflict, and why the choice of which part gives way is political, not technical.
What none of them established is why correction fails in institutions that have all the machinery. The appeal channel exists. So does the variance track. Even the manual can be challenged. And the harmful rule persists for a decade anyway.
The answer this essay defends is that correction is not only a design property. It is an ecological one. An institution lives inside an economy — of funding, labor, competition, and career risk — and that economy prices every act of correction. Corrigibility that only lives in the design is internal corrigibility. The property that decides whether correction actually happens — whether the design survives contact with its own survival conditions — is ecological corrigibility.
The Three Levels of Correction
The instruments sort into three levels, by what they put in question.
The appeal sorts at the decision level. It puts in question whether one decision was reached correctly. Its protection is also its ceiling: the determination may be reopened, the criteria themselves may not, and the stamina it demands screens most people out before anyone decides anything at all.
The rule trial is the category-level instrument. It asks whether the criteria themselves are defective — whether the exception count has crossed the line where isolated mistakes have to be read as a pattern. One-off settlements let an institution avoid it — mercy stands in for correction, the pressure releases, and the rule survives.
The regime question is the arrangement-level instrument. It asks whether the institution can be made to yield at all — whether the people it governs hold enough material power to stop the machinery when the machinery is wrong. It is what Dependence Without Domination reached in its closing sections: variance tracks, diagnostic tripwires, inverted burdens of proof. Most discussions of "accountability" never reach it, because regime correction is a balance of forces, not a channel.
Three levels, one pattern: each higher level sets the price of the one below it. An institution whose ecology rewards rule trials will run rule trials. An institution whose ecology punishes them will process appeals until everyone involved retires.
All the Machinery, None of the Correction
The Machine Is Not Blind named the systems that know. The claim was never that institutions act blind. The claim was that a system can hold full knowledge that its rule is harmful — the letters arrive, the dashboards flag, the caseworkers file the near-misses — and keep the rule anyway, because the harm is the operating margin.
When the harm is the revenue, the appeal wins decisions and loses the war. The clerk can be right. A variance can be filed. Even the diagnostic tripwire can trip. And the incentive that produced the harmful category is still there on Monday, re-producing it. The appeal operates on decisions; the business model operates on the survival conditions of the institution. They sit at different levels, and the lower one sets the price of the higher one. An appeal cannot solve a business model, because the business model decides which decisions are affordable.
The chain from Dependence Without Domination runs through this essay with the arrows made explicit. Structural compulsion — people severed from direct access to survival — produces institutional incentives: the insurer's loss ratio, the hospital's payer mix, the agency's error-rate targets. Institutional incentives produce dominating architecture: the averaging that could not read fortnightly data, the freeze, the documentation demand. Dominating architecture produces individual harm: the person whose debt describes somebody they are not. Each arrow is the same move. Someone prices the correction and declines to pay it.
Insulation Runs in Three Directions
The word insulation usually protects whoever speaks it. Direction matters more than the word.
The first direction is people insulated from institutional and market coercion. The insulation essay grounds it: non-domination is material, not reputational. A person who can be ruined by a frozen account cannot contest anything, no matter what the channels promise. The essay is also precise about the boundary — "Real insulation cannot be achieved through private hoardings" — because an escape hatch for one person is class position, not insulation. Insulation here means decommodified survival: healthcare, housing, and standing that do not evaporate when an institution takes the dispute personally.
The second direction is public-purpose institutions insulated from the actors who punish them for serving those purposes: the regulator disciplined by the industry it regulates; the hospital that treats the uninsured and gets punished by its payer mix; the newsroom that runs the story and loses the advertisers. Capture is rarely a bribe. Mostly it is a price, quoted in advance, paid by anyone who corrects.
The third direction is the one that keeps the first two honest: institutions not insulated from the people they govern. Standing, contestability, exit, the right to put the manual on trial. Capability Is Not Permission named the two-way version: an institution that holds rights over the people who depend on it owes them a return path, and the return path has to be material.
The asymmetry is the doctrine. Insulation for the governed and for the mission; never from the governed. An institution insulated from correction is a well-fortified hazard.
What the Ecology Is Made Of
Correction has a cost profile. It consumes staff time, invites scrutiny, delays metrics, and creates precedent. Survival conditions that price correction above its alternatives will select institutions that perform correction and practice avoidance. Albert O. Hirschman named the two basic responses half a century ago — exit and voice — and the interesting question was always what makes voice survivable.1
Exit that exists. You Were Free to Choose took apart the defense that rests on paper options: the option existed, the friction did the rest. Exit that costs a person their healthcare, their visa, or their custody arrangement is a price tag on voice, and everyone can read it.
Withdrawal that is possible. The Metric She Repairs Says She Is Not Needed is about the people an institution depends on and does not count. The capacity to stop — a shift, a docket, a service — is regime-level power in its most ordinary form. Institutions know this. It is why the people who can stop them are the ones whose complaints get answered.
Survival that is not hostage. The Death of Slack identified slack — spare capacity, unallocated time, margin for error — as the material precondition of correction. An institution running at 104 percent has channels. It has no ability to act on what the channels hear. Slack is to a bureaucracy what decommodification is to a person: the physical basis of saying no.
An economy that does not select against care. Volatocracy described institutions that survive by moving variability onto the people with the least capacity to hold it. The corrigible institution carries costs the ruthless one externalizes, and unpriced costs select against whoever carries them. So "just build good institutions" has never been a sufficient answer: in a competitive field, the good ones lose to the cheap ones unless the field is arranged so that externalized harm gets priced.
One Common Carrier of Domination
Emergent Universality vs Top-Down Healthcare argued that scale is where domination enters: keep care local, keep it emergent, keep it un-owned, and the domination stays out. That essay carried the position this series has outgrown, and the honest thing to do with it is say so.
The position mistook one common carrier of domination — centralization — for domination itself. Domination travels at every scale. A ministry can be unreachable; so can a co-op whose members are structurally subordinate to its mistakes, a family, a clinic board, a neighborhood association with one landlord on it. The corrigibility axis holds at all of them, and it is scale-neutral by construction: does the arrangement yield to the people subject to it, at a cost they can afford to pay?
Scale still matters, at the level of price rather than definition. Carriers change what correction costs — it is cheaper to walk to the district office than to sue a ministry, cheaper to face five board members than a planetary platform. The mistake was reading a price difference as a difference in kind. A local arrangement that punishes correction is domination with better walking distance.
The Justification Burden
Anarchist Jainism drew the line hard: authority is unjustified hierarchy, and the anarchist rejection follows. The reconciliation this series needs sits one level up. Hierarchy is presumptively dangerous — not definitionally illegitimate. The burden is justificatory, and it travels with the authority rather than being paid once at the founding: no arrangement whose subjects are structurally subordinate to its mistakes holds legitimacy for free. The justification has to be carried continuously, the way conditional authority carries it — valid while the return path works, void when it does not.
Jainism supplies the operating discipline, not just the rejection. Anekantavada — the many-sidedness of truth — is usually read as epistemic modesty. Held against an institution, it is harder than that. The many-sidedness of the situation is a fact about the people the institution governs, and an authority that stays reachable by the sides of the situation it does not occupy is the only authority the doctrine can tolerate. When reachability stops, the presumption reactivates. This is corrigibility with a metaphysics: humility as the operating condition of holding power over people who can be harmed by your errors.
Three Accusations
The program draws fire from three directions, and the answers differ.
The anarchist accusation: standing up institutions sanctifies them, and sanctified institutions become the next domination. The answer is that standing is conditional by design. Authority held without a return path is a hazard with paperwork. The program asks for no trust — only for arrangements whose authority ends when the justification does.
The institutionalist accusation: this is a brief for permanent procedural sabotage, for institutions that can never finish anything. The answer is that procedure is load-bearing. The appeal, the rule trial, the variance track are the return path, and the return path is the difference between correction and coup. But a return path inside a punishing economy is decoration, and the insulation that keeps it alive is material — funding, survival, standing — not procedural.
The socialist accusation: procedural safeguards cannot overpower capital discipline, and pretending otherwise is how the discipline hides. The answer is: correct, and that is the point. Safeguards alone cannot overpower it. The third direction of insulation is material for that reason: decommodified survival for people, funded missions for institutions, priced externalities for markets. The discipline is real, which is exactly why the counter-arrangement has to be.
The Governing Program
The series lands here:
Power must be corrigible, and institutions must be insulated from pressures that systematically punish correction.
The first half is the liberal inheritance — appeals, rule trials, standing, due process. The second half is the materialist one — decommodification, funded missions, priced harm. Neither half works alone. An economy that punishes correction will starve the most carefully designed channels, and a corrigible design without a return path is a suggestion box.
As a governing program: capacity without impunity, constraint without paralysis, correction with consequences. Institutions strong enough to act, unable to act without being reachable, and unable to reach into the lives of the governed without the governed holding power enough to stop them.
Build powerful institutions whose authority yields to reality. Give governed people the material power to make them yield. Organize the surrounding economy so that doing the right thing is not institutionally suicidal.
The test for any arrangement, at every level, is the same three questions: who can correct, at which level, and what happens to them afterward. An arrangement that answers with channels and not with prices has answered with decoration.
Notes
Albert O. Hirschman, Exit, Voice, and Loyalty: Responses to Decline in Firms, Organizations, and States (Harvard University Press, 1970).