A woman with a seasonal income applies for coverage. In the public system her claim is denied by an eligibility rule that cannot see income arriving in lumps. She appeals, but the appeal only confirms that the clerk applied the rule correctly. In the private system a risk model scores seasonal income as instability and denies her claim. The insurer handles her appeal and finds its model sound. In both systems she spends the same afternoons on hold, produces the same documents nobody naturally keeps, and is told, politely, that the process worked.
Two people can argue for a long time about which of those systems is better. They bring evidence, examples, two coherent theories of who can be trusted with the money. Neither notices that the woman’s afternoon was identical in both.
What has to be true first
Whatever design either of them proposes, some institution ends up holding power over people who depend on it. The same goes for centralized or decentralized AI, worker-owned or investor-owned firms, and universal or targeted welfare. What has to be true of that relationship before the power is legitimate?
The question comes before any argument about who should rule, the way a building code comes before an argument about architecture. Whichever design wins, the code says what it was allowed to build. A code is not neutral among designs, though. Some cannot pass without being redesigned, and the code is where that gets found out. The answer comes in nine constraints, and every one of them can be asked of the woman’s afternoon.
Both systems fail her afternoon
View source
%% title: The nine pre-ideological constraints
%% caption: Nine structural tests that come before arguments about ownership, setting what must hold before an institution's power over the people who depend on it is legitimate.
flowchart TD
classDef actor stroke-width:1.6px;
classDef system stroke-width:1.2px;
classDef gate stroke-width:1.6px;
classDef binding stroke-width:3px,font-weight:bold;
classDef status stroke-dasharray:4 3;
classDef burden stroke-width:2px;
classDef repair stroke-width:2.4px,font-weight:bold;
classDef failure stroke-width:2.2px,stroke-dasharray:6 3;
subgraph BurdenAndBlame["Burden & Liability Tests"]
direction TB
C1["1. Compensatory Labor<br/>Whose work makes it look like it works?"]:::burden
C2["2. Authority-Blame Match<br/>Did blame land where power lived?"]:::repair
C3["3. Noise vs Signal<br/>What is being filed as an exception?"]:::system
end
subgraph ExitAndCost["Usability & Entitlement Tests"]
direction TB
C4["4. Cost of Refusal<br/>Where exit is ruin, usage is captivity"]:::gate
C5["5. Traversal Cost of Rights<br/>Does using the right destroy the claimant?"]:::burden
C6["6. Dependence as Obligation<br/>Reliance raises debt, not license"]:::binding
end
subgraph RevisionAndStrength["Corrigibility & Scope Tests"]
direction TB
C7["7. Capacity to Lose<br/>Can the rule be revised by those it harms?"]:::repair
C8["8. Useful != Authorized<br/>Has capability promoted itself to jurisdiction?"]:::gate
C9["9. Institutional Durability<br/>Strong enough to depend on, constrained enough to trust"]:::binding
end
BurdenAndBlame ~~~ ExitAndCost ~~~ RevisionAndStrength
Whose work made this look like it works? A system doesn’t get credit for working until someone asks whose compensatory labor, exhaustion and risk produced that appearance. The smoothness is the failure, relocated, and an account that leaves out the people absorbing it describes the system plus its subsidy.1
Who got blamed, and could they have changed the outcome? Responsibility is legitimate only where the authority lived. Blaming the participant with the least power gets rid of accountability rather than exercising it.2
What is the institution calling noise? The recurring workaround, the appeal and the case the rule mishandles all expose part of whatever the model systematically fails to represent. So does the human who fixes what the rule broke without a record of it. An institution that files them as exceptions has chosen to be blind.3
What did refusing cost? Where exit is catastrophic, usage measures captivity. People keep using the system, but that is weak evidence of consent when saying no costs them their income, care or standing.4
What did the right cost to use? A right on paper is only as good as what it takes to use it. If the procedure takes time, money, knowledge and endurance ordinary people cannot supply, the institution has built a right for people who do not exist.5
Was dependence read as license? The more people have to rely on an institution, the more it owes them. Read the other way, reliance turns a fact about people’s need into a right over them.6
Can the institution lose to the people it governs? An institution that can’t be made to change its rules when someone shows them to be wrong dominates the people who depend on it. The values it claims and the election that put it there don’t change that. It also has to lose at its own expense. Count what a win cost the people who made it: their hours and money, the months before a remedy, what the institution spent to investigate, and whether the next person with the same problem gets relief without starting over.7
Did usefulness become authority? A tool that works for one purpose gets applied to another right away. Nobody authorized the second use, and succeeding at the first doesn’t amount to a grant.8
Is the institution strong enough to be worth this? The goal is institutions strong enough to depend on and constrained enough not to turn dependence into domination. They also have to be corrigible enough that the people their mistakes land on don’t have to destroy themselves to get them fixed.9
The woman’s public system fails the third, fifth and seventh. Her private system fails the fourth, sixth and eighth. Neither argument about ownership has a word for the afternoon.
Each ideology promotes one constraint
View source
%% title: What each position misses in her denied claim %% caption: Each familiar position judges the coverage of the woman with seasonal income by the one value it trusts, from her choice of insurer to public ownership. Each misses the failure that value leaves out. flowchart TD classDef actor stroke-width:1.6px; classDef system stroke-width:1.2px; classDef gate stroke-width:1.6px; classDef binding stroke-width:3px,font-weight:bold; classDef status stroke-dasharray:4 3; classDef burden stroke-width:2px; classDef repair stroke-width:2.4px,font-weight:bold; classDef failure stroke-width:2.2px,stroke-dasharray:6 3; M["Market: she chose this insurer<br/>and can leave"]:::system -. "promotes choice" .-> B1(["Blind to captivity:<br/>leaving costs her coverage"]):::failure S["State: the eligibility rule<br/>was voted in"]:::system -. "promotes vote" .-> B2(["Blind to power never granted:<br/>no vote decided her case"]):::failure T["Technocracy: the risk model<br/>is accurate"]:::system -. "promotes metric" .-> B3(["Blind to error at her expense:<br/>lumpy income scored unstable"]):::failure L["Localism: decided by people<br/>who know her"]:::system -. "promotes closeness" .-> B4(["Blind to scale and capture:<br/>help goes to whoever is known"]):::failure C["Cooperative: she votes<br/>on the plan"]:::system -. "promotes voice" .-> B5(["Blind to what voice costs:<br/>meetings after afternoons on hold"]):::failure O["Socialism: the public<br/>owns the plan"]:::system -. "promotes title" .-> B6(["Burden left in place:<br/>same rule, same hold queue"]):::failure M ~~~ S ~~~ T ~~~ L ~~~ C ~~~ O
Each familiar position turns out to be one of the nine, promoted to stand in for all of them. The market’s story is consent, since people chose it and can leave. The state answers with authorization, because it was voted for. For the technocrat it is accuracy, for the localist proximity, for the cooperative participation, for the socialist ownership.10
Each of those names a constraint that matters. The mistake is the promotion, and you can predict each position’s typical failure in advance, because it is usually the constraint its story leaves out. Markets rarely have a vocabulary for captivity. States rarely have one for jurisdiction they were never granted. Experts rarely have one for being wrong at someone else’s expense. Transferring ownership changes who profits and leaves the burdens and the corrective authority where they were.
The arguments never converge because each side measures legitimacy in the unit its own constraint supplies. Everyone’s evidence is real, and beside the point to everyone else.
The nine answer what no institution may be permitted to do. They don’t say which ownership arrangements, incentives and dependencies keep producing exactly those conditions, or what would reliably prevent them, though they give the first of those its test and set a requirement for the second. Legitimacy asks what has to hold for any institution’s power. The causal question explains why a particular institution ended up holding power the way it does, and neither substitutes for the other. Ownership, financing and governance decide whose interests an institution has to satisfy, which costs it can push onto others and whose objections threaten its survival. They have to be examined as possible causes of the failure and not only as rival answers marked against a common test.
The nine do not decide between public and private, and they do not treat the two alike. They can be checked on the mechanism rather than the slogan. Trace where the operating costs went, what refusal cost, who was blamed, what got called noise, and whether anything the woman said could have changed the rule. The answers do not all point at the owner. Where the harm is the operating margin, no appeal reaches it, because an appeal cannot solve a business model. What has to change is what the arrangement earns from the harm, and sometimes that means a different owner. Where the harm is a procedure that nobody on the receiving end can revise, a different owner leaves it where it was. An arrangement can fail either way, and passing one kind of test excuses nothing on the other. You don’t have to declare any arrangement illegitimate in advance, because you can watch it fail the questions. No owner gets to choose which of the nine count.
The nine add up to a definition that procedure alone cannot meet. An institution’s authority is legitimate only where its permitted acts are limited, where its material structure does not turn dependence into a lever, and where the people its failures land on can enforce a change to the conditions that produce them. In the woman’s case, enforcement would have to reach past her denial to the rule or model behind it, and past that to the budget and incentives that keep it in place. If those will not move, it has to reach the institution’s mandate or its continued operation. Answerable means, here, that the institution’s errors cost the institution itself, including the cost of making correction work. The people it governs should not have to stay vigilant, unusually capable or financially secure to keep protections that are supposed to belong to everyone.
Notes
The founding version, the person who becomes the failure so the system can keep calling itself orderly, is Everyone Is a Crumple Zone Now.
The principle and its sorting rule: Don’t Blame the Nurse for the Sixteen-Hour Shift.
Exceptions as the readable surface of an unrepresentable remainder: A Great Metric Can Mean Someone Is Quietly Fixing It and Consensus Without Conflict Is a Lie.
Consent measured by the cost of refusal: If You Can’t Cancel Easily, You Never Agreed.
Rights priced by the capacities they demand: You Were Free to Choose and Who Can Survive an Error Is the New Class Line.
The five conversions this refusal stops, and the dependence arithmetic: Being Relied On Doesn’t Give You Authority.
What separates transparency, participation and appeal from actual correction: Nobody Broke a Rule, and Nobody Can Fix It. The count of what winning costs the people who win: The Right to Get Tired.
The one refusal that stops every promotion from observed to authorized: Being Relied On Doesn’t Give You Authority.
The positive program, durable institutions without sovereignty over their dependents: Anarchists Want Institutions Without Masters.
Ownership changes who profits and does not, by itself, change who can correct, so domination survives the transfer to better ownership: The Power to Correct the Rules Is Handed Out Too.