When the numbers that establish responsibility expose people

The options

The order shown is not a ranking of preference.

1. Option 1

   Release the covenant-region-wide aggregate

   It reduces exposure of individuals and small areas and keeps the schedule, but citizens may have difficulty verifying the explanation of responsibility where discrepancies concentrate.

2. Option 2

   Release de-identified regional aggregates

   It reveals regional differences in implementation and demands for improvement, but concerns about re-identification when combined with other public information may discourage verification participation.

3. Option 3

   Release only the review panel's findings

   Detailed records can be examined in a controlled environment, but re-verification by ordinary citizens is limited and disputes arise over the panel's representativeness.

The situation as it stands

If the unit of disclosure is not confirmed by noon, the next participation application closes without verification results, so both participating bodies and citizens must judge without knowing the state of implementation.

A review of disclosure of arms-control verification materials in the fictional Dasom covenant region. The organizations, events, all figures, and future analysis technologies are a synthetic premise.

1. Premise 1The joint verification team reviewed whether the agreed transition procedure was implemented and found some discrepancies in the records. Discrepancies are distinct from confirmed violations, but the draft prepared for disclosure displays regional figures and verification stages together.
2. Premise 2The committee can choose, by noon, among a covenant-region-wide aggregate, regional aggregates, or independent inspection as the unit of disclosure. Additional de-identification review takes four weeks, and applications to join the next verification close the day after disclosure.
3. Premise 3A local citizens' group claims that the whole-region aggregate hides responsibility, and workers' representatives worry that small-area figures could be used to infer an individual's work history. Participating bodies make predictability of the disclosure method a condition of joining the next round.

Where it holdsDecide the unit of disclosure for the agreed arms-control verification results, excluding detailed facility information from disclosure.

What can be lost

• Local citizens may lose the basis for holding parties accountable and demanding improvement, depending on the level of aggregation.
• Workers involved in verification may lose their privacy through re-identification and their freedom of later employment choice.
• Participating bodies may lose trust in cooperation and bear the cost of preparing for the next verification due to disclosure uncertainty.

What is still unknown

1. Unknown 1Whether discrepancies reflect differences in record-keeping method or substantive non-implementation
2. Unknown 2The scope of possible re-identification when combined with external public information
3. Unknown 3The actual effect of the disclosure unit on applications to join the next verification

Signals to decide again

• If the personal information testing lead inspects the possibility of re-identifying combined information every week, before and after disclosure, and confirms a new exposure path, the decision is reconsidered.
• If the head of the joint verification team compares explanatory materials for discrepancies every two weeks and confirms a change in classification, the public explanation is reopened.
• If the participation registration officer confirms an official withdrawal citing the disclosure method at the application deadline or when the next round opens, the decision is reconsidered.