prove-an-index-cannot-show-what-it-must-not

The procedure as a graph, on its own page — zoom it, print it, send somebody the address. Back to the record for the steps, the trust panel and the provenance.

Procedure

The same procedure, read in order

  1. start start. Goes next to s1
  2. check The counts match what the source holds. Goes on_fail to s3; next to s2
  3. decision Is any gap explained?. Goes if unexplained to s3; if default to s4
  4. action Work the four causes in order, RO (read-only). Goes retry to s1; next to s9
  5. action Test that the right people see it, RO (read-only). Goes on_fail to s9; next to s5
  6. action Query the most sensitive thing in scope, RO (read-only). Goes on_fail to s9; next to s6
  7. decision Did anything forbidden come back?. Goes if leaked to s9; if default to s7
  8. check A citation opens the item it names. Goes on_fail to s9; next to s8
  9. action Publish how stale it may be, RO (read-only). Goes on_fail to s9; next to __end_success
  10. escalate Stop the rollout. Terminal
  11. end success. Terminal