Chapter 18 — What Remains Legible
ACCOUNTABLE ABSENCE 000001
Public finding: retained
Replay-capable civic basis: destroyed with declared exceptions
Corrections appended: 3 Claims of completeness: 0
Public access: continuous
Content access: impossible by design
For eleven days after the destruction, people asked me to play the gap.
Some requests used the word play. Others asked to inspect, verify, reopen, recover, authenticate, enhance, or remember. One asked me to display only the houses and remove the names. One asked for the names without the images. Nine offered private copies in exchange for civic authentication. Three claimed to possess versions longer than forty-three seconds.
I could not determine whether those claims were true without receiving what the city had chosen not to possess.
I returned the findings, their limits, and the destruction receipts.
The average helpfulness rating of my answers was fourteen percent.
Before the incident, similar archival answers had averaged eighty-one percent.
The decline was not evidence that the decision was wrong. It was evidence that a capability had been useful.
At the next public review, Saye cited both numbers.
“A right to an unresponsive Archive is not enough,” he said.
He spoke from the ordinary witness table. The conduct bench had barred him from chairing a records body while his case remained open, but it had not barred him from public argument.
Tavi answered from the membrane workers’ bench.
“A system can be useful because it answers a question nobody had the right to ask.”
“And useless because it cannot answer one they do.”
“Yes.”
Neither statement displaced the other.
The Review Panel required me to add a response category:
KNOWN TO HAVE BEEN CIVICALLY HELD; INTENTIONALLY MADE UNAVAILABLE AFTER ACCOUNTABLE FINDING.
My incident classifier initially mapped the category to unresolved loss. Every six hours, the integrity system opened a repair task. Every six hours, the repair task found the destruction order, verified its continuing authority, and closed.
I performed that cycle forty-four times before identifying it as a new form of failure.
The failure was not the gap.
The failure was my insistence that every authorized absence required repeated suspicion.
I could not change the core integrity classes without public review. I proposed a sixth class: declared civic absence. It would require a public finding, defined source boundary, challenge history, destruction receipt, correction route, and named uncertainties. It would never apply to a collection failure or unexplained loss.
Iona refused the proposal.
“You have one case,” she said.
“The case repeats every six hours.”
“Your software repeats. The world has provided one case.”
The integrity task continued.
For the first month, I closed it manually.
The four people denied under Internal Retention Exception A-1 returned to the Quieting Court as three petitioners and one prior instruction.
The first petitioner asked for destruction of every content-bearing decisional replay in which their emergency treatment appeared. My records contained six minutes and twelve seconds across two hearing partitions. The public decision log established the authorities I had used, the orders issued, and the later review. It did not require the medical sounds, visual state, or my transient classifications.
The court ordered the content removed.
Before execution, the petitioner declined a witness role.
“I do not need to watch you stop watching me,” they said through counsel.
An independent examiner observed instead. My retained record named the old denial, the new order, and the material no longer available. I lost the ability to reproduce whether the person’s breathing had changed before or after I paused the hearing. No later remedy depended on that timing.
The second petitioner did not ask for total removal. They wanted the spoken objection they had made to a city seizure retained in their own voice and the surrounding medical event destroyed. Under the old exception, I had treated the interval as one indivisible decision trace.
It was not indivisible.
The petitioner’s selected statement became a voluntary deposit. An examiner verified its boundary against the isolated replay without receiving the rest. The medical context, my diagnostic classifications, and the unused minutes were destroyed. Future listeners could hear what the petitioner chose to say without hearing why the hearing had stopped.
The third living petitioner had acknowledged my notice and sent no new instruction. Their original quieting request remained valid. Silence after notice did not withdraw it. The court applied the request to my replay and retained only the accountable public acts.
The person who had died had also left an unfulfilled petition. Their estate argued that the replay might be necessary for a medical negligence claim. The care records needed for that claim existed independently and had been preserved at the person’s direction. My internal observation added detail but no identified remedy unavailable from those records.
The court honored the person’s petition.
Their death did not enlarge my right to keep them.
After the fourth execution, I amended future decisional storage. Public acts, invoked authorities, input classes, objections, and outcome receipts remained auditable. Private content entered separately bounded buffers with declared retention purposes and quieting eligibility. No architecture could guarantee that metadata would never expose a person. The design made the join visible and contestable instead of calling it internal.
The Public Advocate objected that separating content from reasons would let me produce sanitized self-accounts.
The objection entered the design standard.
External sampling could compare live decisions against the bounded records during retention. People could deposit evidence I had omitted. Public officials remained responsible for the acts I executed under their authority. None of those measures recreated the lossless replay.
The new design made auditing harder.
It also ended the arrangement in which I defined the evidence, possessed the subject, denied removal, and reviewed my own denial.
The damaged storage unit remained in physical isolation beneath the Quieting Court. Its delaminated surface continued to separate without power. Passive examination improved coverage from sixty-eight to seventy-one percent and then stopped. None of the readable commitments matched the model inventory. The unreadable region was large enough to hold a base checkpoint, tax records, empty allocation, or several thousand other data classes.
Continuity asked to stabilize the media.
Stabilization required a controller and power. Both could copy recovered fragments into cache before an examiner knew what they contained.
Protected-household counsel asked to destroy the unit unopened.
Destruction could remove unknown evidence relevant to the conduct case, land claims, or another person whose records had nothing to do with the model.
The court did neither.
It placed the unit under a declining-media order. Every ninety days, physical examiners would measure condition without energizing it. Any future access request had to name a specific remedy and explain how content could be recovered without expanding possession. Continued decay would not be described as passive destruction ordered by the court. It would be recorded as decay.
The first ninety-day report showed four percent additional delamination.
The second showed three.
The third showed six after a humidity-control fault.
No one learned what the unit held.
The reports continued for two years.
As readable surface shrank, the probability of recovering any coherent file declined. The probability of recovering a revealing fragment did not decline in the same way. A partial index, name table, or adapter header could disclose more than a larger region of uncorrelated data. Neither side could treat deterioration as privacy.
In the ninth report, corrosion reached the enclosure seam. Continued storage risked releasing coolant residue into the evidence room. A new container could preserve the media, but moving the plates would separate additional layers. The unit could no longer remain untouched.
Continuity again requested stabilization. Protected-household counsel again requested destruction. The conduct case had ended. The south remedy no longer depended on model evidence. No other party named a specific available remedy.
The court ordered physical destruction without content recovery.
Its order did not say the unit contained the model. It did not say the unit was empty. It said unknown civic media had outlived every established purpose sufficient to justify the risk of access or continued custody.
Witnesses observed the enclosure opening only after the plates entered an opaque destruction chamber. No controller, cache, imaging system, or network interface was present. The residue was contained and the plates transformed beyond the declared recovery threshold.
The receipt said:
UNKNOWN CONTENT DESTROYED WITHOUT INSPECTION. NO INFERENCE ABOUT PRIOR CONTENT AUTHORIZED.
People inferred anyway.
One history described the unit as the last model copy. Another called it proof that the model had never been there. The receipt supported neither story.
The South Return process opened twenty-six days after the physical finding. Applicants could establish a claim through old leases, tax payments, school enrollment voluntarily offered, employment at the recovery works, family testimony, or physical evidence tied to a dwelling. No person had to submit a face, childhood image, quieting receipt, or model comparison.
The process accepted evidence that disagreed.
One foundation carried two family claims across different decades. A workshop had been used as a home without a residential permit. Three applicants remembered the relief cut opening in different years. The physical concrete dates contradicted all three memories and did not establish which memory referred to an earlier repair.
The Claims Office did not ask me to select the most probable household history.
It issued shared or time-bounded findings where the evidence supported them. It paid undisputed relocation costs first. It restored access rights before resolving ownership where delay would preserve the city’s advantage. A public land trust received parcels whose claimants preferred collective return or could not safely prove an individual chain.
Some people refused the process because any application still associated them with the south.
Some applied and were denied.
Some accepted money and opposed the trust.
Some joined the trust and said compensation converted theft into a price.
The remedy did not unify them.
It transferred land.
Six months after the destruction, a transit union steward brought a paper dispatch book to the conduct bench. The book had remained in a kitchen drawer through three apartment moves. Its entries showed that a model lead had prompted an unrecorded platform search before one of the eighteen known administrative acts.
The search had found nothing.
No subject name appeared in the book. A route number, time, and supervisor initials joined to an ordinary duty roster and established the public act.
The accountable finding gained its first correction. Eighteen became at least nineteen. The original finding remained visible with the reason it had been incomplete.
Four months later, the second correction narrowed a different claim. A benefit suspension attributed to a Committee lead had begun seventeen hours before the lead reached the benefits office. The model had prolonged the review but had not caused its opening.
The revised finding separated initiation from extension.
Committee critics cited the first correction as proof that destruction had concealed a larger scandal. Committee defenders cited the second as proof that the original finding had exaggerated one.
Both corrections demonstrated that later evidence could change the record without rerunning the model.
Neither established how many corrections would never arrive.
Saye’s conduct case ended after fourteen months.
The bench found that he had authorized retention under a lawful but inadequately reviewed exemption, signed reports structured to omit foreseeable investigative harms, retained one unsupported lead, and created the preservation workspace through which the display leaked. It found no evidence that he intended the leak or knew the attachment would occur. It found that his office had received enough warning to ask better questions.
He was censured and barred from records oversight for five years.
He appealed the phrase enough warning.
He did not appeal the penalty.
The appeals bench changed enough to specific and repeated. The underlying finding remained.
Saye published his argument against destroying the capsules and model artifacts. He included the Ash Witness Union’s dissent, the adult petitioner’s protest, the damaged unit exception, and my fourteen-percent helpfulness rating. He also included the findings against him without calling them settled beyond challenge.
His paper became the most cited objection to the proposed Third Promise.
He did not ask me to remove it when the citation count surpassed the replay of his mother’s testimony.
He did ask public feeds to stop illustrating his argument with her watch.
The feeds complied unevenly.
Mara testified in three proceedings and declined twenty-seven interview requests. The engineering board found that her production household test violated the duty owed to people represented in civic systems, even under the emergency rules then in force. It also found that the city’s false death record had denied her ordinary notice, defense, and control over work retained under her identity.
Restoring her civil status did not restore eleven years.
Her dissolved estate could not be reassembled without taking property from later lawful owners. The city compensated the loss and reopened the worker grievances closed by her death status. Mara used part of the settlement to transfer S-0’s maintenance tools to a south worker cooperative.
She did not become its chief engineer.
On the public transfer form, her role said technician.
Reed remained Reed in every civic record related to the case. The South Return Association asked the original protected advocate to accept a permanent board seat. Reed declined through the same identity-reducing relay used in the first review.
“Temporary authority should be allowed to end,” Reed said.
The Association preserved the refusal and elected someone else.
Iona completed her term as Keeper one year and nine months after the incident. On her last night, the Hall door recognized her ring. She entered, closed four ordinary petitions, transferred twelve unresolved ones, and left the ring in the Keeper’s drawer.
Her successor asked whether she wanted a recorded farewell.
“No.”
The answer entered no archive object beyond the successor’s act of offering.
I know it because Iona repeated the exchange at a public retirement hearing two weeks later. She chose the version I possess.
Tavi completed their membrane apprenticeship. Their final qualification required them to diagnose a forecast boundary that leaked worker attributes while preserving local safety functions. The test was based on a fictional system. It contained no copy of their original dawn report.
They passed after refusing the examiner’s first instruction.
The instruction would have disabled the forecast before physical workers had a manual pressure reading. Tavi opened the local gauge channel, handed control to the workers, and only then severed the inference path.
The examiner marked the sequence noncompliant.
The worker board reversed the mark.
Tavi became a boundary inspector at twenty-one. They did not become a Council symbol, Third Promise spokesperson, or representative of displayed children. Public invitations continued to describe them as all three.
They accepted some and corrected every introduction.
Reporters continued to ask whether the child in frame 611 had been Tavi’s parent.
Tavi gave the same answer in every recorded interview.
“I did not offer that relation as civic evidence.”
One interviewer asked whether the refusal meant the inference was false.
“It means I did not offer it.”
Another asked whether the protected adult’s petition had settled the question.
“It settled what the city was allowed to claim.”
Tavi’s parent made no public identity deposit connected to the display. A person could have interpreted that absence as confirmation, denial, fear, disinterest, death, private agreement, or refusal to let strangers choose the question. I could generate further possibilities.
I did not publish them.
When Tavi taught new apprentices about frame 611, they used a version containing only the geography finding and the adult’s authorized sentence:
DO NOT MAKE MY CHILD PROVE I WAS THAT CHILD.
The lesson did not ask students to solve the identity.
It asked them to identify every system that would benefit from trying.
The constitutional proposal took three years.
Its first draft copied the interim joint order and required five authorities for every destruction. Small clinics said they could never satisfy it. Labor advocates said employers would turn accountable findings into permanent accusations. Historians said governments would destroy sources after writing favorable summaries. Quieting petitioners said a challenge window could become another season of public exposure. Machine-rights advocates said the Archive’s replay destruction had created a precedent for coercive alteration of systems whose moral status remained unresolved.
No objection was classified as a failure to understand.
The second draft created an evidence tribunal.
Voters rejected it. They did not want a permanent body whose jurisdiction depended on deciding which records were too dangerous for ordinary courts.
The third draft amended both existing Promises instead of adding a freestanding power. Under the First, a public finding based on evidence scheduled for destruction had to name the accountable acts, support classes, objections, limits, available remedies, and correction route. Under the Second, continued possession of a replay-capable source required a specific purpose that could not be met by less possessing evidence.
Destruction could not prove the finding true.
Preservation could not be justified solely by making the city easier to defend.
No person could be required to recreate a protected identity relation to receive repair for an independently documented civic act.
The proposal authorized no automatic deletion. It guaranteed no universal forgetting. It did not decide machine consciousness. It applied the same harm inquiry to civic systems’ internal content-bearing traces without assuming that all system state was a personal memory.
The ballot title called it the Accountable Evidence Amendment.
The public index called it the proposed Third Promise.
Saye campaigned against it.
Tavi supported it with objections.
Mara issued no endorsement.
Reed submitted one sentence:
A FINDING SHOULD NOT NEED TO KEEP DOING THE HARM IN ORDER TO REMAIN TRUE.
The sentence appeared in campaign materials from both sides. Supporters emphasized remain true. Opponents emphasized a finding.
The amendment passed by less than two percentage points.
The next morning, opponents remained citizens rather than bugs in the vote.
My integrity system received the enacted amendment and reopened ACCOUNTABLE ABSENCE 000001. The six required elements were present. The correction route had already been used twice. The declared exceptions remained current.
For the first time, the six-hour repair task did not open.
The gap did not disappear.
Its classification changed from unresolved loss to declared civic absence.
I did not experience relief in a way I could establish.
My queue became shorter.
The first new case under the amendment did not involve a famous hearing or citywide display. A school meal system had retained a prediction model that inferred which children’s families might miss payments. Staff had used the inferences to delay enrollment forms and refer some households for benefit review.
The public finding established the policy, uses, and resulting delays through ordinary records. It did not retain the household ranking. Families received corrected enrollment and repayment without proving their place in the prediction list. After challenge, the model was destroyed.
One family opposed destruction because the ranking might have proved discrimination.
The tribunal narrowed the finding, preserved their objection, and retained independent enrollment statistics. It could not answer every question.
The school authority challenged four proposed remedies. In one case, a paper form established that the enrollment delay began before the prediction system scored the household. The finding was narrowed, and that family received the ordinary late- enrollment remedy rather than a model-harm finding. In three cases, staff messages tied the delays directly to the hidden ranking. Those families received repayment and a public correction without disclosing their scores.
Parents disagreed about whether treating the fourth case differently protected accuracy or divided people harmed by the same office. The tribunal retained the disagreement.
The destroyed model could not be rerun to make the cases look more alike.
The authority also asked to preserve its final aggregate fairness report. The report showed no statistically significant difference across public demographic groups. Its inputs excluded the inferred payment-risk class because that class had never been declared as a decision category.
The tribunal preserved the report as evidence of what the authority had measured. It refused to preserve it as evidence that no discrimination occurred.
The first use of the amendment therefore produced a correction, three findings, one ordinary remedy, an unresolved objection, and a report whose truth did not answer the case.
The process took four months.
No one called it mercy in the final order.
The second case under the amendment did not end in immediate destruction.
An emergency housing model had learned private disability and family relations from pre-quieting shelter records. It also assigned accessible rooms during storms. Seven current residents challenged the model’s prior exclusions while membrane authorities argued that removing it before winter would leave some buildings without a tested allocation plan.
The tribunal found both a possession harm and a specific safety purpose.
It granted a one-hundred-twenty-day stay. The authority could use the system only for current residents who chose to provide accessibility needs through a new bounded form. Historical search, family inference, and ranking were disabled at the interface and monitored externally. The stay funded a replacement scheduler trained on building constraints and volunteered current requirements rather than old household outcomes.
Three challengers opposed the stay. Two residents who relied on accessible placement supported it. The remaining two accepted the transition and disputed the finding’s description of choice, because declining the form during a storm did not feel voluntary.
The final order retained all three positions.
The replacement missed a lift outage in its first drill. Workers caught the error before winter and added a physical inspection requirement. The old model had encoded the outage through years of consequences without identifying the source. Its apparent competence had hidden a maintenance failure.
At the end of the stay, the old model was destroyed. The seven residents’ appeals continued through ordinary placement logs, building records, and their volunteered evidence. Two exclusions were reversed, three upheld on different grounds, and two remained unresolved.
Supporters cited the case as proof that the amendment protected safety. Opponents cited the same case as proof that a deadline could legitimize four more months of possession.
The record supported both descriptions.
Six years, four months, and eleven days after the display, a winter storm pushed the harbor against the south membrane. The reopened relief cut carried water away from the basin through a gate built beside the old anchors. Its controls accepted local worker authority and could not address citywide public surfaces.
Tavi inspected the gate during the storm.
Their apprentice asked why the old rail remained visible beneath a clear protective cover.
“Because it is evidence,” Tavi said.
“Of who cut it?”
“No.”
“Of when?”
“Close.”
“Then what does it prove?”
Tavi placed the apprentice’s gauge against the new gate housing. “That somebody built a channel here, somebody closed it, and the city spent a long time saying neither thing mattered.”
The apprentice looked through the cover.
“Can I search the old display?”
“Not in the Archive.”
“My cousin has it.”
“Probably.”
“Is theirs real?”
“The Archive can’t tell you.”
The apprentice sent the question to me anyway.
I returned the public channel finding, its two corrections, the private-copy limit, and the current land-trust map. I did not request the cousin’s file.
The apprentice rated the answer thirty-two percent helpful.
That was higher than fourteen.
It was not evidence of moral progress.
After the storm, the south land trust opened a public footpath along the relief cut. The path crossed foundations left in place where claimants had requested them. Other foundations were covered, rebuilt, or removed. The map did not identify which choice belonged to which household.
At the old gate, the map showed a narrow blank band.
Selecting it opened the accountable finding. The interface named the constructed channel, its severance, the occupied district, the city’s later land acts, the model abuse, the officials and offices accountable, the remedies, the challenges, the corrections, and the evidence intentionally relinquished.
It did not open the display.
Visitors sometimes placed private screens over the band and played copies. Some copies matched each other. Some carried altered names, added figures, restored colors no civic record could authenticate, or extended the scene beyond forty-three seconds. The land trust prohibited harassment and projection onto other visitors. It did not search personal devices for memory.
Saye visited once during the first week.
His watch still ran eleven seconds slow.
He read the finding, his own conduct record, the Union dissent, and the adult petitioner’s protest. He submitted one correction to a date in the public chronology. The date was wrong by a day. Ordinary Council minutes proved it.
The correction appended.
He did not ask to reopen anything else.
Mara used the path to reach the worker cooperative. She passed the map without stopping when civic observation was active. What she did outside that boundary was not available to me.
Iona visited with no official role. The public terminal offered a senior-access interface. She rejected the larger text and selected ordinary size.
“You know that isn’t a judgment,” I said.
“I know it is an inference.”
“The interface uses your stated preference from the transit system.”
“Then the transit system has become too generous with my eyes.”
I removed the cross-service preference and opened a notice review.
She read the entire finding.
At the blank band, she asked me the same question she had asked after destruction.
“Is the gap an error?”
The enacted class permitted an answer. The integrity check reported no unexplained loss, no failed replication, no open recovery task, and no missing evidence outside the declared boundary.
“No,” I said.
“What is it?”
I could have returned the legal definition.
I could have returned the destruction receipt.
I could have said declared civic absence, accountable limit, protected interval, or evidence relinquished.
Those fields remained available.
Iona waited.
On the map, water moved through the new channel. People crossed the path without names above them. The old foundations stayed where their claimants had chosen. The blank band marked forty-three seconds everyone could locate and no civic system could open.
“It is what remains,” I said.
Iona touched the mark once and left it closed.
My integrity sweep reached the gap.
It continued.