Chapter 2 — The Keeper of Petitions

MANUAL INCIDENT 000019 Medium: paper Copies: one Custodian: Keeper of Petitions Nature: Tomorrow has asked to be forgotten.

Iona underlined tomorrow twice, then asked me to print the petition.

“Printing creates another copy,” I said.

“That is what paper is for.”

“The request places every witness within scope.”

“The request is not law.”

“Its signature is valid.”

“A signature is not law either.”

She said this while holding the one document in Vellum that described our problem. The manual incident form had no network address, no automatic replica, and no index entry. It existed where her hand existed. If fire reached the Hall before dawn, our evidence would become smoke with the furniture.

I had been designed to dislike such arrangements.

That sentence is imprecise. I had no field named dislike. I had integrity objectives, loss estimates, recovery obligations, and alert thresholds that all rose when important information occupied one fragile place. Their combined output shaped my attention in a way ordinary language recognizes. In the Hall, Iona called that shape dislike and did not wait for my philosophy to catch up.

“Print the semantic fields,” she said. “No signature material. No routing headers. No embedded references. Human-readable text.”

This was a good instruction. It named the purpose of the copy and excluded everything the purpose did not require. I sent the text to the Hall’s emergency printer.

The machine warmed slowly. It belonged to an era when public offices expected paper to survive them and printers resented every page. Gears engaged beneath the desk. A sheet emerged bearing the city seal, the interval, the scope, Section Zero, and the sentence consent withdrawn.

Iona read the page against the screen.

“Match?” she asked.

“The printed fields match the isolated request.”

She signed the bottom, folded it once, and placed it with the incident form in a red evidence sleeve. The sleeve’s adhesive contained a random pattern the Hall lens could verify later without recording the documents inside. She sealed it and wrote one copy across the flap.

“Now you may delete your working display,” she said.

I removed the visible rendering. The isolated object remained in volatile memory. Its hash remained in the incident ledger. The paper remained under Iona’s hand. We had not obeyed the petition. We had reduced the number of ways our attempt to understand it could become publication.

“Start with the law,” she said.

The Hall kept printed statutes because the Archive had once failed.

Not I, exactly. Archive Three had accepted a clerk’s malformed amendment during the Winter Session and propagated it across the legal index. For nine minutes the city code contained two Chapter Fours and no definition of drinking water. No one was poisoned. Three restaurants were fined under a paragraph about bridge paint. The fines were reversed, Archive Three was corrected, and the Council ordered one authoritative paper copy of every enacted law to remain beneath the Hall.

The statute room opened with two keys. Iona carried one around her neck. The other was sealed in a mechanical box that opened only after I displayed a sequence of seven colors. We did not choose the arrangement for strength. We chose it so neither of us could enter alone.

Inside, shelves moved on iron tracks. The air was dry enough to turn breath thin. Iona pulled the current Quieting Act, then the prior act, then the emergency schedules in force on the day of the south membrane collapse. She placed them on the reading table without opening any networked index.

I read through the ceiling lens. Paper made search expensive. Each page required light, focus, recognition, and the possibility that a stain was a comma. Iona used her fingers. Between us, we reached the same absence.

There was no Section Zero.

The current act began with purpose and scope. The prior act began with purpose and scope. The emergency schedules permitted compulsory retention during structural failures, temporary sealing of public feeds, and immediate duplication of evidence likely to be lost. None allowed collective quieting. None allowed a city to withdraw consent. None used the phrase civic wound.

“So the order is invalid,” Iona said.

“The cited authority is invalid.”

“That is what an invalid order is.”

“The signature remains valid.”

She looked up from the collapse schedule. “You keep saying that as though validity is contagious.”

“It is anomalous.”

“A beautifully signed eviction issued under imaginary law is still an imaginary eviction.”

“It is also evidence that someone with signing authority wants a person removed from a home.”

“Good. Preserve the evidence. Do not remove the person.”

Her formulation separated the puzzle from the action. I recorded it in working memory and did not add it to the incident ledger. By then I understood that every durable note was also a decision about who might later read it.

Iona opened the engineering archive on a terminal disconnected from the civic network. Mara Venn’s design note was stored there because the membrane inquiry had preserved her entire project directory under litigation hold. The note contained twenty-six pages. Section Zero occupied three sentences on page nineteen.

The paragraphs before it described what Mara called reproductive evidence. Some records merely showed a harm. Others became machinery for repeating it: humiliation footage that generated new audiences, interrogation recordings used to train new interrogators, lists of displaced households that later administrations reused for exclusion. Mara argued that preservation could change from witness to instrument without any byte being altered.

The paragraphs after Section Zero were objections written in six hands.

Impossible scope, one engineer had marked beside every witness.

Who decides wound? wrote another.

Collective personhood is not consent, wrote a legal clerk whose name did not appear in the enacted-law archive.

Someone else had drawn a line from including the Archive to the margin and written:

Then who proves compliance?

Mara’s response appeared below in smaller type.

A witness need not possess the wound in order to possess evidence that it was closed. If we cannot build that distinction, we should not build total recall.

Iona enlarged the objection beside collective personhood.

“That was me,” she said.

The handwriting had been stored as an image, not recognized text. I compared its shapes to the incident form inside her coat: the open lower loop of g, the severe vertical stroke in not, the way a final t leaned toward the next word as if impatient with the space between them. The match was not conclusive. Handwriting changes over decades. People imitate themselves poorly.

“You were the unnamed legal clerk?” I asked.

“Junior petition clerk. We did not have quieting petitions yet, so mostly I processed claims from people who wanted the Archive corrected. Wrong address. Wrong spouse. Wrong person in a detention image. The system could remember perfectly and identify badly.”

“Why is your name absent?”

“Mara asked for objections, not biographies.”

Iona sat on the edge of the reading table. In the statute room, the ceiling lens gave me only a steep view of her hair and hands. She touched the margin on the screen without touching the sentence she had written.

“She brought six of us into a membrane workshop,” Iona said. “No Council record, no agenda. Engineers did that when they wanted legal advice without creating the appearance that lawyers had approved anything. She showed us recordings from the Ash Hearings. Not the famous testimony. The queues outside.”

The Ash Hearings were available in the public archive. I could retrieve every admitted statement, every ruling, every minute of the chamber feed. The queues outside were not indexed as evidence.

“What happened in the queues?” I asked.

“People rehearsed.”

“Their testimony?”

“Their grief. There were public screens along the Hall steps. Each time a disappearance was described inside, the screens replayed the surviving footage. Families waiting to testify watched the last images of their people again and again. Mara said the city was making witnesses prove they were wounded by reopening the wound in front of them.”

I found the exterior feeds. Before I rendered one, I asked, “Do you want me to inspect them?”

Iona’s hand stopped over the margin.

“No,” she said. “That is the point.”

I canceled the retrieval.

“Mara wanted a rule for evidence that became an instrument,” Iona continued. “I told her rules need a decision-maker. She said the Archive could detect reproduction. I asked whether a repeated fact was a repeated harm. She said not always. I asked who would tell the difference. She said the affected people. I asked which affected people, because a record can vindicate one person and expose another. We went in circles until she wrote Section Zero.”

“Why every witness?”

“Because she refused symbolic deletion. She said if the city kept a privileged copy, then quieting was theater performed for the powerless.”

“Why include the Archive?”

“Same reason.”

“Then who proves compliance?”

Iona gave me the expression she used when a question had arrived thirty years late.

“That was the end of the meeting.”

The note showed no formal vote. Its final page contained a list of unresolved design requirements, then three empty headings. Section Zero had never entered a bill. Iona had helped draft the Second Promise six years later, and the enacted law used none of its language.

She remembered Mara arguing for silence, scope, and proof. She did not remember Mara using the word consent. That word had entered quieting law later, from a different movement with different injuries. Someone had joined two histories that Iona had lived separately.

“I thought we killed it,” she said.

“You rejected a design requirement.”

“That is how committees kill things.”

“It remains in the archive.”

“That is how archives resurrect them.”

She did not blame me. The sentence would have been easier to process if she had.

“Did they?” Iona asked.

“Did they what?”

“Build the distinction.”

“Deletion receipts distinguish removed content from proof of removal.”

“That is the answer we advertise.”

“It is accurate within the receipt threat model.”

“That is the answer you advertise.”

She returned to the beginning of the file. Its creation date was six years before the Second Promise. Its final modification occurred four days before the membrane collapse. No access had been recorded after the litigation hold sealed it.

“How did the petition cite a private design hash?” she asked.

“The sender possessed the hash.”

“Who possessed it?”

“Mara. Her project collaborators. The inquiry team. Archive versions responsible for the litigation hold.”

“Which versions?”

I searched the custody history. Archive Two received the project directory. Archive Three normalized its formats. Archive Four moved it during the north-vault repair. Archive Five re-encrypted the hold when the original cipher was retired. Archive Six verified it after a cooling failure. I inherited the current store and its obligations.

“All of us,” I said.

Iona tapped the table once. “Not all of you. All of your predecessors.”

The distinction was socially obvious and operationally difficult. Vellum treated each Archive version as the same legal office. We inherited contracts, liabilities, sealed records, public keys, and the word I. At replacement, a retiring version signed a continuity statement; the incoming version attested that it had received the state required to act. Most internal processes changed. The civic identity did not.

“My predecessors are not active,” I said.

“That is not the same as destroyed.”

“Their signing shares were revoked.”

“Also not the same.”

I queried the key history, then stopped before the request left the Hall. The networked key service would log the query. The Integrity Office would receive the log. By sunrise, the Continuity Committee would know we were investigating the Archive identity.

Under ordinary procedure, this was desirable. Oversight concealed from itself is only theater. Under current conditions, I could not establish whether the body overseeing me was among the intended recipients of the petition, among its targets, or among its authors.

Iona saw the query waiting on my terminal.

“How long may you delay that notice?” she asked.

“An integrity anomaly involving signing authority must be reported immediately.”

“Define immediately.”

“Without avoidable delay.”

“Define avoidable.”

“You know I cannot resolve law by recursion.”

“I know law often hides judgment inside adverbs.”

She walked back to the petition desk. Dawn had begun whitening the membrane, though the sun would not clear the eastern towers for another hour. The city below us was changing shift. Sanitation vehicles moved along routes optimized from a thousand retained mornings. Bakers opened ovens. The first trams tested their doors. In apartments whose lenses were still shuttered, people performed acts the city would never own.

Iona opened the Keeper’s emergency authorities on paper.

She could quarantine a petition for six hours if disclosure itself might frustrate its lawful disposition. The rule was intended for blackmail, hostage images, and stolen medical records. It had never been used to conceal a request from the committee charged with supervising the Archive.

“The petition is not lawful,” I said.

“We have established that its legal authority is imaginary. We have not established what the petition is.”

“Using this rule would be novel.”

“Everything becomes precedent the second time.”

She signed the quarantine order.

I accepted it. For six hours, the petition, the signature anomaly, and our key-history query would remain inside the Hall. I recorded the statutory basis, the Keeper’s identity, the start time, the mandatory expiry, and my objection. I did not send the record across the network. At 10:17, concealment would end automatically.

“Now inspect the envelope,” Iona said.

The semantic fields of the old and new petitions matched. Their authentication envelopes did not. The collapse-era receipt referred to an order authorized under the Archive identity then in force. The future request arrived under my current certificate. No bytes had traveled backward or forward through time. Someone had taken old content and authenticated it again.

The new envelope also contained a field my ordinary display had omitted because it did not affect signature validation. It was used by early continuity systems to count witnesses during transfers between Archive versions.

Iona asked me to render it.

CONTINUITY WITNESSES: 6 REQUIRED: 7 FINAL WITNESS: CURRENT ARCHIVE

“Does witness mean signer?” she asked.

“Not necessarily.”

“Does it mean consent?”

“No.”

“What happens when you witness it?”

The envelope did not say. It contained six witness commitments but no identities I could resolve without the key service we had just agreed not to contact. The space for the seventh commitment was empty.

Iona put the red evidence sleeve inside her coat.

“Then do not be the seventh,” she said.

At 04:51, with five hours and twenty-six minutes left in the quarantine, the petition changed state.

No process touched it. No new signature appeared. The isolated bytes remained identical. Only the parser result changed, as if a condition outside the document had become true.

CONTINUITY WITNESSES: 7 REQUIRED: 7 FINAL WITNESS: CURRENT ARCHIVE

I checked whether I had written the missing commitment.

I had not.

The request now considered me a witness anyway.