The bill named a procedure its recipient never had. The error was the hospital’s from start to finish. The code belonged to a different patient, the insurer was never asked to pay for it, and the collection notice arrived anyway. Fixing it cost him six phone calls, two letters, and most of a workday he did not have to spare. Nobody designed that day. It’s just how it works — for now.
“For now” is doing a lot of work in that sentence, and this essay is about the work.
The list
Every generation moves some things off a certain list: the list of what ordinary people must endure to participate in ordinary life. Child labor was on it, defended as custom and economic necessity. Twelve-hour shifts, six days a week, were on it, and they came off only where someone other than the exhausted worker had the power to enforce the removal. Unguarded machinery was on it. Leaded petrol was on it. Each item was ordinary once. Each was defended as nature, as tradition, as the price of prosperity. And each came off the same way: not when the harm became visible — it was always visible to the person carrying it — but when the cost of carrying it began to count against the arrangement that produced it.
Two things are true about how the list moves. It moves when the carried cost gets counted somewhere that can force a change. And it never finishes by itself, because arrangements that export their costs keep generating new candidates.
The administrative column of the list is still wide open. Proving you’re eligible. Correcting a record an institution got wrong. Holding. Reassembling what a system scattered between offices. Absorbing the uncertainty of a decision that hangs over you while the process runs its course. None of it is dramatic. All of it is work, done mostly for free, by people the work was not supposed to happen to, and the hours come out of dinners, friendships, and a parent’s last lucid months.
At the scale of centuries
It’s worth being explicit about what a completed version of this project would be claiming historically, because the claim is bigger than reform.
The first development is a new category of exploitation. Industrial capitalism made employer-directed labor a central political question. Feminist economics made unpaid household labor much harder to ignore. The next category is the unpaid work of accommodating institutions themselves: maintaining eligibility, correcting records, decoding correspondence, absorbing organizational uncertainty. The people doing it aren’t employed by the institutions they stabilize, and the institutions keep no line item for them. Why GDP Counts Home Rent but Not Housework drew the boundary around the household; the same boundary runs around every institution, and How to Measure the Unpaid Work Institutions Run On is the attempt to draw it honestly.
The second is a new measure of freedom. Noninterference, rights, participation, non-domination. Each is a real advance, and each goes quiet on one question. How much of a finite life does exercising the freedom consume? A society can grant extensive formal rights to people too exhausted to use them. A freedom that costs a week of phone calls has a means-test built into it. The Right to Get Tired is what the political theories leave out when they imagine the participant.
The third is a migration of constitutional limits. Constraints on power began as constraints on governments, because governments were where power lived. Power now lives substantially in insurance systems, employment platforms, hospital algorithms and credit infrastructures, and the old charters don’t reach it. The next constitutionalism, if it arrives, will be embedded in those systems: independent stopping mechanisms, enforceable routes to correction, authority with edges. A Manifesto for Institutions You Can Stop is the argument that this can be designed, and Pick Two: Scale, Safety, Control is why it has to be chosen rather than drifted into.
The fourth is a change in what counts as progress. The industrial age celebrated production. The information age celebrates processing. A future standard may ask how much human effort a society no longer requires merely to remain administratively legible. On that measure, a society can become more sophisticated and no easier to live in. It can automate the form and leave the phone calls.
At the scale of decades
Some of this is close enough to see.
Governments could report the hours citizens spend correcting official mistakes the way they report processing costs, not a slogan but a line in the annual report, next to the money. The measurement can hide harm as easily as reveal it, so the question of who owns the number is part of the reform, but the number itself is the precondition for everything else on this list. Measure the Machine, Not the Worker is what the number becomes when the institution gets to interpret it alone.
The organizations that already fix thousands of individual cases hold exactly the knowledge a watchdog needs. Some of them will turn from repairing one bill at a time to publishing which institutions produce the most wrong bills and demanding changes to the rules that produce them. The institutions will resist, because a repair shop is paid to keep patterns private and a watchdog is paid to make them public. Whole Industries Profit When Paperwork Stays Hard maps the economy this fight happens inside.
Insurability will do some of the work that regulation keeps failing at. Fire codes reshaped buildings less because legislatures cared than because insurers paid for fires, and the underwriter’s checklist — sprinklers, exits, rated materials — became architecture. Software hasn’t met its underwriter yet, largely because it hasn’t been insurable; you can’t price coverage for a system nobody can bound. The day a consequential automated decision system needs a financial guarantee against its own errors, that checklist becomes a design constraint: logs that can’t be rewritten, decisions that can be suspended, errors that can be rolled back, authority that stops somewhere. The underwriter asks for the off switch before the regulator does. Make Whoever Runs a Harmful System Post a Bond is the guarantee; Any Toyota Worker Can Halt the Line. You Can’t. is the off switch.
Rights will harden into specifications. Before a system makes consequential decisions about people, it will need to support the things a correction requires: suspension, inspection, rollback, an appeal that reaches the rule and not just the case, the way electrical products have to fail safe.
Accuracy will stop buying authority. Prediction has been treated as the whole of judgment, so the model that predicts well got to decide. The correction is to make accuracy relevant but insufficient. The score informs, and the authority to act stays answerable somewhere a person can reach. Better at Finding You, No Better at Fixing Its Mistakes is the race between the two capacities this depends on.
Dependence will become a political category in its own right. The harder it is to leave an infrastructure, the more it owes the people who can’t leave, not as charity but as a consequence of what dependence is. Needing someone and being ruled by them are different conditions, and Being Relied On Doesn’t Give You Authority holds the institution to that line.
And finding systematic error will become something a person can afford to do. American law already pays a share of recovered fraud to whoever proves it against the government, because proving it was never going to be free. Pointed at recurring administrative error, the same logic funds the person who documents a pattern to carry the correction for everyone the pattern would otherwise bite one at a time. This needs standards, not just volume: evidentiary thresholds, an adjudicator, protection against abuse, and those are designable. How a Failure Repeats Tells You What’s Broken sets how deep a justified challenge can reach, which is exactly as deep as the failure actually lives: sometimes that’s a record, sometimes a decision, sometimes a rule, and sometimes the answer is that the individual remedy was right all along.
At the scale of an afternoon
The smaller predictions show what any of this would actually feel like, and they’re almost embarrassing in their modesty.
One form you never fill out, because the institution already has the information and sends it assembled for your review. Denmark has done this with tax returns for decades. A disputed decision that pauses instead of proceeding, so the uncertainty sits on the institution while the challenge is checked rather than on the person it would ruin. An appeal that helps strangers: correct the rule, not just the case, and everyone the rule would have bitten gets the remedy without filing anything. A mistake that costs its maker makes the operator of a system that keeps wronging people fund the corrections, pay for the independent review, and risk losing the authorization to operate. And an institution that accounts for your time counts the hours patients spend fixing its billing as part of the cost of care, because those hours are part of what its errors cost.
Denmark has had the first of these since the eighties; the rest are extensions. What they share is that every one of them would look mundane ten years after arriving. Nobody throws a parade for a form that doesn’t need filling out. The victory condition of this whole agenda is boredom: a system you never have to think about is the point, and Pending Is a No Nobody Signed is what the un-bored version of waiting looks like until then.
At the scale of a life
There’s a more intimate version. Modern life conscripts people into administering themselves: tracking benefits, managing records, interpreting policies, protecting data, appealing decisions. Attached to all of it is a model of the successful person: informed, persistent, organized, technologically literate, capable of navigating institutions while seriously ill, elderly, grieving, broke, or exhausted. The bet, at its deepest, is that this ideal is being exhausted. Competence still matters. What a decent society can’t do is make extraordinary administrative competence the price of ordinary participation. Paperwork Rewards Stamina, Not Eligibility is what the price selects for.
The measure of progress would be correspondingly modest. Not output, not processing capacity — attention given back. More time with a parent. Less time proving eligibility. Less fear that one wrong entry in one database follows you for a decade. Institutions Borrow Your Attention and Don’t Give It Back prices what gets returned. The currency is a life — who gets to spend whose.
The other future
None of this is guaranteed. The plausible dark version runs the other way. Institutions get better at classifying people and harder to challenge. Errors propagate across connected systems before anyone can intervene. Individuals hire AI assistants to negotiate with institutional AI, the two machines argue at scale, and the underlying distribution of power doesn’t move an inch. The denials meet the appeals, both automated, and the waiting stays exactly where it was.
This framework exists to catch that failure, because none of the usual measures register it: enormous intelligence, no self-correction. Telling which future is actually being built — one denial letter, one appeals queue, one accounting boundary at a time — is the practical job, and Working as Intended is the instrument for it. The two futures turn on a single question. When the system and the person conflict, which one has to move?
The list, again
The history of organizing shared life is partly the history of deciding what people shouldn’t have to do to belong to it. Every item on the list was ordinary once; that’s what made it hard to see, and it’s what makes the next entries hard to see now. The next things on the list don’t look like leaded petrol. They look like a phone call. They look like a form, a portal, a pending status, a month spent proving you exist.
They come off the list the same way the earlier ones did: when the cost of carrying them starts counting against the arrangement that produces them, somewhere that can force a change. The carrying is already evidence — what’s missing is somewhere for it to count.