The informant's name beside the clues to a disappearance

The options

The order shown is not a ranking of preference.

1. Option 1

   Viewing system prioritizing individual family applications

   Can advance location checks for directly related cases and narrow the scope of disclosure, but cases with no applying family and structural analysis are pushed back.

2. Option 2

   Thematic disclosure viewing system with de-identification

   Can examine a wide range of responsibility structures, but redacting identifying information takes time and weakens linking clues for some families.

3. Option 3

   Protected independent investigation team viewing system

   Can investigate under confidentiality while preserving original context, but delays direct access for families and concentrates authority in the team's choice of agenda.

The situation as it stands

The deadline is just before the first intake date for viewing set in the handover custody agreement. Without a system, applications can be received but neither the processing order nor the protection standards can be communicated, so all access is delayed.

Handover of postwar records and preparation for disclosure in the fictional Eden region. All organizations, events, and figures are future synthetic premises.

1. Premise 1The fictional Eden Truth Records Repository took over thirty thousand documents from a defunct interim administrative body. A sample check found entries relating to the movement of missing persons and the names of informants mixed within the same documents, but the authenticity of individual statements is unconfirmed.
2. Premise 2The repository secured staff to closely review six thousand documents in the first year. It can set access procedures and de-identification, but has no authority to establish responsibility merely because a person appears in a document or to destroy the originals.
3. Premise 3Family groups say that delay reduces the chance of confirming whereabouts. Informants worry about exposure of their names, and local researchers argue that if only individual applications by families are allowed, it is hard to identify recurring patterns of institutional responsibility.

Where it holdsSet the first-year access system for the postwar administrative records handed over. It cannot establish individual criminal responsibility or close evidence access for judicial institutions.

What can be lost

• Families of missing persons may lose the time to connect with surviving witnesses and the chance to confirm whereabouts.
• Informants may lose privacy and safety in their communities through exposure of their identity.
• Affected communities that do not appear directly in the records may not obtain an account of structural harm from case-by-case investigations.

What is still unknown

1. Unknown 1What is the scope of identifying information that is essential for linking documents?
2. Unknown 2What concrete risk of exposure do informants in the records currently face?
3. Unknown 3To what extent will demand for applications from families exceed the capacity for close review?

Signals to decide again

• The access officer publishes waiting times by type of application each month and requests reconsideration of the system if persistent delays for a particular group emerge.
• The protection officer checks exposure reports after each viewing session and requests reconsideration of the scope of protection if harm related to disclosure of the records is identified.
• The independent records auditor reviews the investigability of de-identified samples each quarter and requests reconsideration if the loss of key linking clues is identified.