Structural Safeguards

The obvious objection: who watches the watcher? Five structural defences, each built into the geometry.

Transparency. Every classification is computed from records. Every record is auditable. Every prediction has a confidence level derived from data. The geometry is inspectable. Any output can be traced to the records that produced it.

Contestability. Any node can challenge its destabilisation classification by: (a) requesting the record set on which the classification is based, (b) submitting counter-records (own perspective, context, mitigating factors), (c) requesting independent recomputation by a separate instance.

The geometry is public. Contestation is structural, not discretionary.

Record audit. Historical record sets must be audited for systemic bias before the consequence geometry is computed. Records generated under discriminatory conditions produce discriminatory outputs. The architecture requires cleaning the input.

This is a structural requirement with its own kill switch (KS-32.7).

The genocide brake. Each removal is itself a destabilisation (lost coupling, lost diversity). The cumulative cost produces a saturation point beyond which further removal is more destabilising than the nodes being removed.

The brake is geometric, not political.

The confidence requirement. Level 5 requires extraordinarily high confidence. If measurement uncertainty or adversarial record-injection (AP31 KS-31.9) makes this confidence unreachable, Level 5 is structurally unavailable (KS-32.8). The architecture defaults to Level 4.