A board paper goes to the general counsel on Monday for review. By Thursday, when the board reads it, three people have edited it: a figure updated, a paragraph softened, an appendix replaced. The review covered a document that no longer exists. Anyone relying on it would have to ask which version was reviewed and what has changed since, and in practice nobody asks, so the review lends its authority to text it never saw.
A check made on an editable document holds until the next edit. The record of a maneuver in The Lam System for Political Interaction is built so that a check, once made, holds for good: nothing written in it is edited or removed, and nothing is admitted unless it has the form its kind requires. The Record sets out the discipline as a practice and what an actor learns from it. What the discipline guarantees is narrower and more mechanical: the record stays well-formed through every move, and because it can never be tidied, the system can always tell one thing written two ways from two different things.
Well-formed before, well-formed after
An entry is well-formed when it has the shape its kind requires, sits at an address that can hold it, and is credited to the party that performs it. Every operation belongs to the actor, the target or the cycle itself, and an entry with the wrong owner is refused. The guarantee says that if the record is well-formed before a move, it is well-formed after it, whatever the move.
Illustrative. The people and the company are invented. Niamh Kelly is general counsel at an engineering consultancy and wants the managing partner, Anand Iyer, to move contract review for client bids under her team. Anand's alternatives are to leave review with the project directors or to send it to an outside law firm. Her first lever shows Anand the claims the firm paid last year on contracts nobody in legal had read. Her second, still to be played, is a letter from the firm's insurer on what legal review would do to the premium. Her deputy, Mateo Ruiz, keeps the record, usually during the meeting and usually in a hurry.
In one meeting Anand says he is leaning toward the outside firm. Mateo starts to write it down as Anand's selection, and the record will not take it, because the insurer's letter has not been played, and Anand's choice has to wait until it has been read or given up. What it will take is Niamh's reading of how Anand now sees his options, written under his name as the target, since the perception is his act and her judgment of it is the only access the system has to him. Had Mateo written that perception under Niamh's name, it would have been refused for the wrong owner.
Neither attempt leaves anything to clean up later. A malformed entry is stopped at the door, so the record never contains one, and nobody reading it a year on has to wonder which of its entries can be trusted.
Will the record take Mateo's entry?
Illustrative. The people and the company are invented. The tests an entry meets before it is written, in the order they apply. Tick each one Mateo's entry passes, from the top; the first left unticked says why the record turns it away. Anand's perception written under Niamh's name stops at the third test, and his selection written before the insurer's letter is played stops at the fourth.
Why it holds
The guarantee rests on how the record grows. The only way it changes is by a move, and every move adds entries and rewrites none. And a move is admitted only when what it needs is in place, at which point what it writes has the fixed shape of its kind, at an address built from addresses already on the record. The old part of the record is untouched and the new part is well-formed, so the whole of it is.
Sub-cycles inherit the same soundness. When a gate fails, the sub-cycle's addresses are the parent lever's address extended, and its interest is the parent's missing resource carried across. Both were checked when they were first written, so the sub-cycle starts from sound parts and adds only entries of its own. The entries the cycle writes for itself, such as a gate failing or a cycle opening, point at things already written: the failed gate names the resource its lever declared.
What changes alongside the record moves under the same discipline. Which cycle has control, which cycles are waiting and what the actor holds all change constantly, and each change follows from an entry that caused it, so none of them can reach a state the record does not account for.
What a check that stays made buys
Without the guarantee, a check on the record would be like the general counsel's review of the board paper, true on Monday and out of date by Thursday. With it, every state a maneuver can reach is well-formed, and nothing has to be checked twice.
The order of a cycle's phases depends on it. Each phase reads the shape of what came before to know what may come next. Selection needs a reading of every lever still in play before it can be written. The gate looks for a declared need, and a handback for the resource the parent lacked. A malformed entry could be read as the wrong phase, and the cycle would move on a false reading of its own record. The other guarantees start from the same footing: capital can be counted from the record, and a maneuver's end traced through it, because every entry those accounts read is known to be the kind it claims to be.
Refusal at the door also keeps the record the actor's, for the reason What the System Is gives: a keeper that repaired a malformed entry by guessing what was meant would be filing its own guesses among the actor's judgments, where no later reader could tell them apart.
One thing written two ways
A record that never overwrites also never tidies. When Niamh narrows her aim to contract review for the firm's largest bids, detection runs again, and Mateo records Anand's options a second time, the outside firm first this time and the project directors second. In an editable document someone would delete the first list or merge the two. Here both stay, and whether the revision changed what Anand is choosing between has to be answered by comparing them.
The system answers it mechanically. It recognizes exactly three ways of writing one thing differently: the steps of a path grouped differently, the members of a set listed in another order, and the agenda's root written with a Latin A or with the Greek capital alpha that looks the same. Shorthand, such as Mateo's habit of skipping the step for Anand because the interest has only one target, is first read into the full form. Both expressions are then brought to one canonical form and compared. Mateo's second list comes out the same as the first, so the record shows that the revision narrowed the ask and left Anand's options as they were. Had he added a review panel of senior partners to the second list, the two would differ, and the record would show a revision that had changed the decision itself.
The list of three is short on purpose. Each is a difference in writing that cannot be a difference in meaning, and everything else can be. The order of steps in a path says what contains what, the number on a sibling says which one, and the mark on a projection says it is an expectation and not yet a fact. A sameness that let any of those go would let the record call two things one.
One thing written two ways, or two things?
Illustrative. The people and the company are invented. Eight pairs of writings from Niamh's record, as Mateo or Niamh might put them down. Guess whether each pair says one thing or names two, then select it to see why.
Select each item to see the verdict.
The members of a set can be listed in any order. The second detection names the same options as the first.
How a path's steps are grouped does not change where it leads.
The two letters look alike in most type and are one letter for the agenda.
The interest has one target, so the shorthand is read as passing through him before anything is compared.
The order of steps says what contains what. Swapped, the path names something else, or nothing at all.
The number says which sibling. Letting it go would merge the project directors with the outside firm.
The mark on the projection says it is an expectation. The record keeps the forecast and the fact apart, even when they agree.
Niamh declared two levers, at two addresses. Sameness concerns how things are written, and these are two things.
Whatever two writings it is given, the comparison reaches a verdict, and the verdict is right in both directions: it never merges two things and never splits one. Its cost rises only in step with the length of what it compares, so it can run on every entry as the entry is written. It is also deterministic, so anyone who replays the record later can rerun any past comparison on the same inputs and reach the same answer.
What neither promise covers
Well-formed is a statement about shape. Niamh's first detection left out a panel of senior partners that Anand was in fact considering, and it was perfectly well-formed. Her reading of how Anand took the claims history is well-formed whether or not she read him correctly. Sameness concerns how things are written: if the insurer's letter made the same argument as the claims history in Anand's mind, they would still be two levers, because she declared two. Expanding a lever's name into the case it stands for is a recorded step of its own, and The Record explains why a name and its definition are kept apart. Whether a name behaves in every respect like its body is a further question, which the system names and has not yet taken on; What the System Cannot Yet Represent lists it.
What the two promises settle is the record's own form: its shapes, its owners, its addresses and how its entries are written. What concerns Anand stays with Niamh. She can hand the record to an adviser without a covering note on which entries were checked, because all of them were, and wherever she and Mateo wrote the same thing differently, the record already says so.