A flag lands on a benefits account. The system calls the claim fraudulent and withholds the benefit pending review. The claimant appeals. The appeal is legitimate, the flag is wrong, and both facts take six weeks to establish. In the end the benefit is restored with back pay, which reads as a correction and is one, after the fact.
What happened during the six weeks? The claimant paid for the institution’s error while the institution was still deciding whether it had made one. Back pay returns the money. The six weeks are what suspension is about, and they are the part of the appeal that almost no arrangement treats as a design decision.
A dispute is a period, not a verdict
Any process for settling a disputed decision has to say what happens between the challenge and the ruling. While the dispute runs, one of two things is true. The original decision stands, and the person it applies to lives with the consequences while the appeal runs. Or the original decision is suspended, and the institution carries the uncertainty until it has shown enough to keep its own decision in force.
Both are defaults. Neither decides who is right. They decide who pays in the meantime, which is a different question and comes first.1
Most systems pick the first default without saying they have picked anything. The appeal is granted, the decision stands meanwhile, and the meanwhile is the design. Because the meanwhile is never named, it is never compared: an institution that hears appeals in a week and one that hears them in fourteen months are scored on whether the appeal exists, not on what the gap costs the person sitting inside it.2
An appeal that resolves by expiring is the same mechanism with the default hidden. Nothing is refused, and the decision stands until the person’s standing is no longer worth what it costs to use.3
Reversible is a matter of timing
Goldberg v. Kelly is the strongest precedent for treating the default as the doctrine, and it is older than the machines. The Court held that welfare could not be terminated without a hearing before the termination, even though a post-termination appeal could theoretically reverse the decision.4 The Court’s point was timing. A correction that arrives after someone has lost the means of basic subsistence is not a correction, because the months are already gone.
An error is only reversible if the reversal arrives in time, and the default sets the time. A system that can be corrected in principle but moves slowly is not corrigible for the person waiting on it, because corrigibility has a deadline and the deadline belongs to whoever chose the default.5
Australia’s Robodebt scheme ran the machine version for four years. It raised welfare debts by averaging annual tax-office income across fortnights, the debts stood from the day they were raised, and the onus of disproving them sat with the recipients.6 When the Commonwealth settled the class action in 2021, it agreed to refund about $751 million it had received or recovered and to drop about $1.763 billion in debts.7 The refunds were a correction, and they came years after much of the money had been taken.
Where the burden belongs
The ordinary objection is that suspension invites abuse: every claimant contests, and nothing takes effect until someone proves otherwise. It deserves an answer, and the current default supplies one, since it has the same flaw running in the opposite direction with none of the bounds.
A suspension default comes with its limits built in. Standing can be required. The contested decision can stand if the institution shows a threshold of evidence or a risk that genuinely cannot wait. A ceiling can stop the mechanism from being run for its own sake.8 Each of those is a falsifiable rule, and the institution is the one with the resources to state and meet it.
The standing default has no limits at all. Nothing caps how long a decision can stay in force while it is contested, and nothing requires the institution to justify the delay or count what the person loses during it. The cost is real, unbounded, and carried by whoever cannot refuse the wait. Suspension can be abused, and the standing default is abuse by design.9
The institution holds the evidence, the category, and the model that produced the decision. It wants the decision to be able to take effect. Under the standing default, the person who bears the error also bears the cost of disproving it, in the dark, against a party with the records. Suspension leaves the uncertainty with the party whose decision created it.
The gap and the remedy
Suspension and restitution are different things. Restitution asks what happens after the error is established. Suspension asks what happens while that is still being decided. An arrangement that pays back the benefit after six weeks and leaves the claimant choosing between rent and groceries for the six weeks has done the first and ignored the second. The appeal that arrives after irreversible harm is not meaningful correction, and neither is the restitution that arrives after the default has already assigned the cost.10
The two belong together. Suspension makes the institution carry the error while it is contested. Restitution makes it carry the error after it is established. An institution that does neither has reduced the appeal to a ceremony: the decision was made, the ceremony was performed, the decision stood, and nothing the claimant lost in the meantime ever appeared in the institution’s books.
What the demand is
When the institution holds the evidence and wants the power, unresolved uncertainty should sit with the institution until it is resolved, and a contested decision should not take effect against a person unless the institution can show why it must.
The rule governs the default and leaves outcomes alone, so the institution does not have to be wrong less often. It has to carry the period in which it might be wrong, and that changes what the appeal is for. An appeal stops being a route back to a ledger that already closed. It becomes the period during which the institution, not the person, holds the uncertainty.11
The suspension question is the shortest test for whether an institution’s corrigibility is real. Do not ask whether the system can be corrected. Ask what happens to the decision while you are right.
Notes
Who carries the mismatch, and how the accounting boundary hides it: Nine Thousand Claims and One Woman. The distinction between what a category drops and who carries it is the throughline of the sequence.
Waiting as an active mechanism, and the interval that only one side has to survive: Pending Is the Answer; the record that is late by exactly its review interval: The Official Record Is Late.
The appeal that resolves by expiring, and the difference between an exception granted and a rule moved: Filed at the Wrong Size.
Goldberg v. Kelly, 397 U.S. 254 (1970). The same timing argument, in the context of alignment’s vocabulary: Alignment Answers the Wrong Question.
Corrigibility as a property of the machine versus a power of the subject, and why transparency without a binding return channel fails: The Corrigible Machine and All the Machinery, None of the Correction.
Royal Commission into the Robodebt Scheme, Report (Commonwealth of Australia, July 2023), which found the debt-raising unlawful and the onus of disproving placed on recipients. The case in full: Stop the Machine, Not the Person.
Human Rights Law Centre, “The Federal Court approves a $112 million settlement for the failures of the Robodebt system” (2021).
The diagnostic tripwire and the threshold at which piled exceptions indict the rule rather than the cases: The Rule Is Never on Trial.
The friction that is the mechanism, and how the right is priced by the cost of exercising it: You Were Free to Choose.
The finding that is valid and binds nothing, and the acknowledgment that performs the correction without providing it: The Apology Was Flawless; the stages an institution must clear for a validated finding to change anything, restitution among them: After the finding lands.
What happens after an adverse finding, as distinct from what the institution says it would do: Stop the Machine, Not the Person.