Authority you cannot inspect is authority you will eventually ignore.

The demand being made

The system's central request is unusually large.

Strip the framework to its core request and it is this: when your account is down and your instinct is to trade back, accept a deployment ceiling computed by a spreadsheet. That is a substantial demand, and it is made at the moment the operator is least disposed to grant it. Whether it is granted depends far less on whether the operator agreed with the design in principle than on whether, at that moment, the number in front of them is legible — traceable to a drawdown figure, a gate band, a tier, and a pool row they can follow. A ceiling that can be followed is a ceiling that gets honoured.

Why the medium matters

Spreadsheets cannot conceal their arithmetic, and that is a feature.

Delivering the framework as workbooks imposes a genuine constraint on its builder: there is no interface to hide behind. Formulas sit in cells, thresholds sit in a configuration tab, and any output can be traced back through its inputs by anyone willing to click. Some of what would be product polish is unavailable as a result. What is gained is that the governance layer's authority rests on something the operator can verify rather than on their willingness to trust a vendor — and for a system whose entire function is constraining behaviour under pressure, that is the better trade.

The partial case

Half-opaque is worse than either extreme.

A completely opaque instrument at least sets expectations: the operator knows they are trusting it and decides accordingly. The corrosive case is the partially inspectable one, where most of the derivation is visible and one step is not. The operator follows the chain, hits the gap, and now has a specific reason to doubt a specific number — and doubt attaches to the whole output rather than to the missing step. This is why the standard has to be complete rather than substantial, and why a single undocumented threshold in an otherwise transparent stack does disproportionate damage.

What inspectability enables besides trust

An operator who can read the machine can improve it.

There is a second benefit that only appears over time. An operator who can trace how a tier resolves can form a real opinion about whether the resolution is right, and that opinion is the raw material of the research process — a scenario contract proposing a specific change, tested and promoted or rejected. A black box produces no such opinions; it produces compliance or abandonment and nothing in between. The inspectable version produces users capable of contributing to the system's development, which is the only route by which a framework improves in the direction its actual operators need.

The obligation it creates

Inspectable means documented, not merely visible.

Visibility alone is a weak form of the promise. A formula is technically inspectable and practically opaque if nothing states what it is for, what the threshold represents, or why the coefficient is what it is. Meeting the standard properly requires that every governing number has a stated derivation somewhere — which is what the operator manuals are for, and why they run to the length they do. The manuals are not supplementary material to the workbooks. They are the second half of the inspectability commitment, and a workbook shipped without one would keep the letter of the promise and break it.

• Compliance under pressure tracks traceability more than agreement with the design.
• Partial opacity is the worst case — doubt spreads from the gap to the whole output.
• Inspectable requires documentation, not merely unlocked cells.

The key idea

A governance system has to be auditable by the person it governs.

Most arguments for transparency are ethical. This one is mechanical: the authority only works if it is honoured in the moment it binds, and nobody honours a constraint they cannot follow when they have a strong reason not to. Every hidden step is a place where, during a drawdown, an operator will conclude the machine may be wrong and act accordingly — and they will be reasoning correctly from what they were given. The refusal to be a black box is the promise that they will never have to.