Read in this order
For when the institution has the capacity but wants to count as more real, more knowing, or more morally important than the people it serves.
- A Great Metric Can Mean Someone Is Quietly Fixing It The dashboard shows 94 percent of patients leaving with a follow-up booked. One scheduler spends every afternoon undoing what the software booked.
- Being Relied On Doesn't Give You Authority Being useful, available, large, or already relied on: each gets read as authority over the people who depend on you. One refusal stops all of them.
- Appeals Test the Clerk, Never the Rule A 21-year-old's cancer drug was denied for an accurate reason: not approved for his diagnosis. No appeal could ask whether the rule was right.
- Nobody Broke a Rule, and Nobody Can Fix It In a bureaucracy where the software, the clerk and the regulator all follow the rules, nobody can be corrected. The people its decisions cost need the power to make it change.
- An Audit That Can't Stop Anything Is Theater Transparency, participation, and better categories present as democratization. The question that sorts them is whether any finding can make power unable to continue.
- An Appeal Process Can Work and Still Be Built Not to Be Used Medicare Advantage insurers overturned 75 percent of the denials patients appealed. About 1 percent of denials ever got appealed, because correcting one was built to cost the most.
- Don't Blame the Nurse for the Sixteen-Hour Shift People keep being blamed for outcomes nobody gave them the power to change. The fix is not kinder blame; it is arithmetic about who could have done what.
- Public or Private, She Was Denied Both Ways A woman with seasonal income is denied by the public system and by the private one, for different reasons. Who owns the system settles less than either side assumes.
- The Rule Works. She Doesn't Fit. Every rule drops some cases, from benefits claims to database fields. Unless the rule says in advance who will handle them, the work lands on whoever cannot refuse it.
- Rank Means Never Having to Adapt Someone always flexes when a rule meets a world it cannot hold. Rank is the right to be the one who doesn't, and in an asymmetric institution, competence lowers it.
- The Power to Correct the Rules Is Handed Out Too Two health systems offer identical coverage. In one, staff fix the unusual case; in the other, the patient makes twenty phone calls herself.
- Feedback Without Standing Fixes Only the Cases It Finds Britain's benefit conversion skipped half the assessment for years. Fixing errors as they surface, without a search for the rest, keeps a known mistake running.
- A Good Complaints Office Can Protect a Bad Rule An ombuds office can answer every complaint flawlessly and never change a coverage rule, because its charter routes what it learns back to management.
- Crackdowns and Task Forces Are One Policy Three responses to homelessness in one budget cycle, and not one eligibility, zoning or lending rule changed. The argument is over which channel handles the people the rules fail.
- Apologies Are Cheap When No One Can Challenge the Error An institution earns authority by what its errors can do. For fifteen years the Post Office's could do nothing, and the apology changed none of it.
- Forgiveness Is for the First Mistake Every institution errs. Forgiveness is owed to the errors it exposes to correction, and forfeited by the errors it defends.
- Aligned With Whom? An AI that does exactly what its owner wants still doesn’t explain why it holds authority over you, or how you correct it when it’s wrong.
- Explaining an AI Decision Doesn't Let You Change It Audits and explanation tools have become an industry. Seeing how a decision was made gets sold as the power to change it.
- 'Unreasonable' Means the System Wasn't Built for You Systems are built for someone with steady income, a fixed address and time to answer every letter. Everyone else gets recoded as the problem.
- "We Believe You" Is Not a Decision Being believed and being able to bind an institution are different things. The failures that wreck lives happen in the gap between them.
- Control Makes Institutions Brittle Workplaces, wards and governments that choose control over trust lose the ability to adapt, and break when conditions change.
- Critique Should Give Power Indigestion Defense contractors sponsor ethics panels and annual reports quote their critics. Critique that matters costs an institution something to swallow.
- Ask Any Ethics Board What It Has Stopped Oversight that performs responsibility without the power to force a sacrifice. If nothing is off the table, nothing was promised.
- "What the Numbers Say" Is Someone's Decision Resisting rule by expertise is not anti-science or anti-technology; it is a defense of democracy
- Pending Is a No Nobody Signed Nobody refutes the claim or denies it. A surgery window closes or an eviction lands while the application is still loading.
- Give Everyone the Benefit and There's No One to Investigate As long as profit depends on refusing someone, institutions will pay to find reasons. Universal provision spends that money on the benefit instead.
- Anarchists Want Institutions Without Masters An institution can be large and durable if it absorbs shocks instead of extracting obedience.
After the path, ask what would have to exist for a wrong decision to be actually undone.
Questions this pattern asks
- What would make this authority stop executing when its justification fails?
- Who can contest the categories the system uses to describe them, and does contesting change anything?
- Is dependence here paired with standing, or does the provider end up with unchecked power over the people it serves?
- Does the institution assume it will sometimes be wrong, and distribute power accordingly?
- When the rule is clearly wrong, who has the standing to change it, and does whoever changes it answer to anyone?
How this pattern runs
Designed Ignorance
Narrates itself as we had no way of knowing, no data, lessons learned.
Did the institution decline to collect the outcome data that would obviously indict the practice?
The Exception Industry
Narrates itself as isolated incident, edge case, individual circumstances, we granted an exception.
Has the same category failed more than a handful of people in the same way?
Blame Pooling
Narrates itself as individual accountability, human error, retraining, a member of staff has been disciplined.
Could the person blamed have altered the outcome, with what they knew, at the time it was still alterable?
Self-Certification
Narrates itself as internal review, we take this seriously, independent audit we commissioned, our processes were followed.
Does the appeal or review route back into the institution whose decision is being contested?
Objections this pattern answers
-
Political theory already has accountability, due process, and contestability.
Those traditions specify procedures, rights, offices, or opportunities to contest. The added question is what happens after the challenge succeeds. If the institution can acknowledge the finding and carry on unchanged, procedural accountability and operational corrigibility come apart. A system can have appeals and still have no failure condition.
-
Isn’t this just Hirschman’s exit and voice, or checks and balances?
Those theories classify the mechanisms open to citizens or competing institutions. This framework looks at how the challenged institution has to respond. Voice can exist without correction, and checks can exist without any of them being binding. The question is whether any opposition can force a change in who holds authority.
-
Failure behavior is too reductive. Politics isn’t software.
The framework claims no determinism. It asks a narrower question that applies equally to discretionary systems: what consequences are institutionally possible after specific kinds of adverse findings? “Officials retain discretion to ignore it” is itself a failure behavior. Indeterminacy becomes one of the things modeled instead of defeating the model.
-
An institution needs discretion. Not every error can terminate authority.
Corrigibility doesn’t require every complaint to stop the machine. It requires defined classes of sufficiently validated failure to produce proportionate mandatory consequences: pause, escalation, fallback, narrower authority, human review, compensation, model withdrawal, rule revision, or termination in severe cases. Safety engineering designs graded responses instead of making every sensor trip destroy the aircraft.
-
This hands anyone who complains a veto over collective action.
Corrective standing is the right to start a process whose conclusion, if the evidence holds up, has to be acted on, and it stops short of a unilateral veto. Filing suit doesn’t determine the outcome, yet a valid judgment still binds when the executive finds it inconvenient. The argument generalizes that property.
-
Won’t explicit failure states cause institutional paralysis?
The opposite can be argued. Systems without them tend toward improvised crisis response, litigation, scandal, administrative overload, and catastrophic loss of legitimacy. Bounded fallback states can make institutions more capable of acting aggressively, because error no longer has to be denied in order to preserve continuity.
-
Institutions can always change informally, so nothing is structurally impossible.
Distinguish correction built into an institution from correction imposed from outside. A president might resign after a nonbinding report, and a corporation might change after press outrage. But if the accountability mechanism itself cannot compel the change, the mechanism lacks that capability. Depending on benevolence, embarrassment, rebellion, courts, or catastrophe is a different thing from having corrigibility built into the institution.
-
If every subject can halt power when dissatisfied, institutions become ungovernable.
Corrigibility is the right to make power account for failures of fact, standing, justification, and consequence, and for power to lose authority when those failures persist. Disagreement alone doesn’t earn it. One person’s grievance can get quick relief in their own case, but revising the system takes a pattern that crosses thresholds of prevalence, severity, and recurrence.
-
Holding power accountable will simply result in frontline clerks and nurses being disciplined for system failures.
Corrigibility attaches consequences upward. Frontline workers are human crumple zones forced to absorb institutional contradictions. True corrigibility targets administrative rules, resource budgets, algorithmic loss functions, and statutory warrants—never scapegoating frontline staff.
Vocabulary
- Corrective standing
- Failure behavior
- Contestable categories
- Assume maximum awareness
- The remainder
- Adaptation asymmetry
- The third distribution
- Feedback with standing
- Signal authority after Arnstein (1969)
- The pacification portfolio
- Non-finality
- The forgiveness gradient
- Non-transitive legitimacy
- Least jurisdiction
- Justification-equivalence
- Founding immunity
- Constitutive standing
- Jurisdictional density
- Constitutive innocence
- Institutional insulation
- Corrigibility after Soares et al. (2015)
- Epistemic closure
Other essays that name it
Permission Is Not Contagious
An institution's power stops being legitimate when it stretches a permission it was given to cover a new act.
An Old Charter Doesn't Cover New Powers
A wetlands board authorized in 1974 swapped paper surveys for a portal that scores parcels.
Refusal Isn't an Opening Bid
A water authority chartered in 1908 passes every test against its charter.
Each Score Was Fair. The Rejection Wasn't.
By 2026 a landlord with a laptop could score a rental applicant.
Assume the People in Charge Already Know
The comforting fiction behind most reform is that the machine is cruel because it is blind.
Where to go next
Part of the archive’s answer to the four defenses: give the people who carry a cost the power to make the arrangement change.