What the worksheet counts, how to set ceilings, and what it is not.
What counts as burden?
Burden covers time, money, delay, risk exposure, humiliation, and cognitive load required to reverse, contest, or survive an error.
How should ceilings be set?
Set ceilings at the maximum cost a normal person should face before enforcement actions begin. Use ranges and document assumptions.
What if a field is unknown?
Leave it blank, note the gap in the assumptions field, and schedule the next review cadence to close it.
Is this a risk register?
No. A risk register scores the likelihood of internal loss. This records who pays when the system is wrong: affected parties in sections 4–9, and, since v1.1.0, the deployer's own governability costs in section 11, priced against the automation's claimed saving.