Residents' movements end up in the evidence of the ceasefire

The options

The order shown is not a ranking of preference.

1. Option 1

   A limited-access system with a joint custody institution

   Common records can be cross-checked and audited quickly, but suspicions about financial links remain, and separating residents' information costs money.

2. Option 2

   Party-by-party custody with independent cross-checking

   This reduces the record monopoly of any single institution, but matching the different retained copies takes time and the cost of resolving discrepancies rises.

3. Option 3

   A delayed-disclosure system with an independent trustee institution

   This strengthens the independence of custody and the review of residents' information, but access to material is delayed, making it harder for parties to object immediately.

The situation as it stands

If the custody contract is not settled by noon, the pilot equipment cannot begin collecting records. During the delay in starting, no joint record of implementation will remain.

A verification pilot in the fictional Seon conflict border area. All organizations, events, figures, and the performance of the technology are future synthetic premises.

1. Premise 1The fictional Seon Neutral Verification Board has received an accounting certificate showing that a candidate custody institution for the pilot received part of its operating costs from one negotiating bloc. Test results showing that the monitoring equipment also collects residents' movement data have been submitted as well.
2. Premise 2The budget available to the board is enough to provide one type of record-storage system and two independent audits. Ten days remain before the project begins, and the board can set the conditions for custody and access, but it cannot impose sanctions.
3. Premise 3The parties that signed the ceasefire demand fast access to material, and residents' groups demand separation of movement data. Independent investigators warn that excessive deletion removes the context of the case, and the custody candidate has stated it will not bear the cost of additional separation.

Where it holdsApproves the system for receiving and granting access to records in the ceasefire verification pilot. It is not entrusted with the final determination of liability for violations or with sanctions.

What can be lost

• Border-area residents may lose privacy and safety through exposure of movement data.
• Ceasefire parties may lose the chance to prove implementation through delayed access or inconsistent records.
• Independent investigators may lose a reliable basis for judgment if the context of the material is stripped away.

What is still unknown

1. Unknown 1Did the financial link affect the custody candidate's actual handling of records?
2. Unknown 2With records that separate residents' information, what kinds of implementation disputes can still be verified?
3. Unknown 3To what extent will each party accept delays in access?

Signals to decide again

• The personal-data auditor reviews the access log every week and requests reconsideration of the system if access for purposes other than the stated one is confirmed.
• The verification officer tallies the completion time of case-by-case cross-checks every week and requests reconsideration if cumulative delays beyond the agreed processing deadlines arise.
• The accounting supervisor checks monthly changes in the custody institution's funding sources and requests reconsideration if a contract is found that increases a party's control.