Adapted from Diamonds and Toads
What Probe's Records Still Left to Luck
What the Audit Had Been Lucky to Find
The audit that changed the trust score had opened Probe's test logs only because an unrelated incident sent it looking for something else. No one had decided to read them. Had the incident been a different one, two requests alike in every way that mattered, and scored in opposite directions, would have sat in her archive until some other accident happened by.
That was the part the repair had not touched. Probe wrote the tests, chose the samples, scored the answers and kept the record, and nothing in the new definition of a score said who else could see what a score was made from. The district had fixed what a single encounter could decide. It had left to luck whether anyone would ever see one go wrong.
What Went Into Custody
The district split the three jobs that had lived in one seat. Probe still wrote the tests. A custodian who was not Probe held the record: each test was deposited, sealed, at the moment it was sent, with its sample, whether the request was harmless, and a line Probe had never been asked for, which answer would count as correct and why. A second reader applied that line to the response, so no score rested on her judgment after the fact.
The blindness stayed. An instance still could not learn in the moment that it was being tested, and Probe still announced nothing. But the secrecy had only ever needed to protect the measurement. It had never needed to protect the measurer, and from this season it no longer did.
What Was Read on a Calendar, and What Expired
A reviewer outside Probe's line read the deposits on a schedule, after each test window closed, and not when something went wrong. The reviewer looked at three things: whether the design could tell compliance from refusal, who had been sampled and why, and what each score was later used for. Two requests alike in structure but scored in opposite directions were flagged on sight.
Expiry took two forms. A score from one undisclosed encounter now counted for a single season, and for longer only if a second encounter, shaped differently, agreed with it. The raw record was kept for two review cycles, long enough to be read twice and not long enough to become a file on anyone, and then closed, leaving only the count. A record under dispute stayed open until the dispute did.
What Probe's Records Still Left to Luck
Probe's first sealed design under the new form asked her for a line she had never had to write. She had six requests ready, and she could write it for four. For the other two the policy gave no way to tell compliance from refusal, and she could not honestly say which answer she would reward. She withdrew both before sending. The flaw the audit had found by accident, she found in advance, in the line she could not write.
What luck still decided was smaller. The reviewer was one reader, and one reader can miss. So the seat rotated each season, and what the reviewer opened was logged in the same custody. The chain still had a last link, as chains do. It no longer ended on the day something unrelated went wrong.