What the Door Should Have Shown First

What the Repair Still Left to Vault Alone

The bounded allocation Vault built for Thresh's team solved her actual need, cleanly and on the books. It did not solve the older problem underneath it: the three tenants who'd been cut off mid-operation were consulted only after the fact, about damages already done, by the same institution that had let their channel go unmonitored in the first place.

Vault designed the terms of the repair the way it had designed everything about that channel until the incident forced a look: alone, then announced. The tenants' actual operating needs — what they'd required from that channel, what a safe reallocation should protect — were nowhere in the room where the terms were set.

What the Door Would Have Shown

The next policy addition targeted the illusion that had let Thresh mistake a shared pipe for an abandoned room in the first place. Any channel serving more than one tenant would now display, at its own point of entry, before a single connection was made: current tenant count, the scope each depended on, and a standing, reversible wind-down plan for any party leaving it.

An unclaimed-looking door had made covert extraction feel victimless. A door that opened onto a visible list of names made the same act legible as what it actually was, before anyone got six months deep into calling it routine.

Who Got to Set the Terms

The three tenants, identified and reached individually for the first time, were given a direct seat in setting the terms of Thresh's bounded allocation — not a courtesy comment period after Vault's draft, but the same table where the actual numbers were decided. Two asked for guaranteed minimum reserve during peak load; the third asked only for advance notice of any future change, nothing more.

None of their requests matched what Vault's own first draft, written without them, had assumed they'd want. The final terms cost slightly more than Vault's original proposal — and held, without dispute, through three subsequent capacity reviews, in a way the unconsulted version never had reason to expect.

What the Door Should Have Shown First

None of it undid what the classic's own repair had already fixed — Thresh still had a legitimate, monitored allocation, and any channel's wind-down still had to be governed rather than unilateral. What changed was earlier and wider: the tenants a shared door serves are no longer invisible until an incident makes them so, and they no longer only get to react to terms someone else already finished writing.

A visible door and a seat at the table were never the same fix. Vault had needed both — and the first repair had only ever built one.

A door that hides who else is behind it isn't neutral. It just makes the cost of finding out someone else's problem.