Ethotechnics asks one question of an automated decision system: when it is wrong, does evidence of the harm reach someone who has to change it? It tracks the answer through six safeguards: capability, authority, evidence, dependency, standing, and correction. It does not say what a good institution is. The boundary matters because a discipline that means everything means nothing. The companion essays describe what it builds: an engineering tradition for delegated agency, and the design stance of ethotechnical design.
The layer it occupies
Ethotechnics sits between principles and institutions. The political anthropology, that people are finite, dependent, varied, and adaptive, is not Ethotechnics. Nor are the principles that follow from it, such as that the burden of adapting should not fall on one side, out of sight, until it destroys capacity. Ethotechnics is the layer that asks how an arrangement can be made to behave as the principles require.
political anthropology → normative principles → ethotechnics → mechanisms → lived consequencesIt does not study what institutions ought to value. It studies how a value becomes a property of an arrangement. Corrigibility as a norm says an institution should be open to revision. Corrigibility as a capacity answers the questions that follow. How does the institution notice its categories failing? How do affected people make a failure legible? Who receives the objection, and what standing does the objector hold? Who can revise the rule? What makes admitting error possible? How long does correction take, and does the institution remember what it learned?
Agreeing that an institution should be corrigible says little about what to build. Law VI keeps the norm and the capacity apart: nominal reversibility is not operational reversibility. The same gap separates every other virtue from its mechanism. Ethotechnics works on the mechanism.
Prevention and correction
The corrective side builds institutions that detect and repair mismatch. The protective side designs institutions so that they do not demand unnecessary adaptation in the first place. Prevention asks whether a form, rule, category, interface, or workplace can accommodate predictable human variation by default. Correction asks whether, when a remainder appears anyway, the people who meet it can make the arrangement change.
The two are not alternatives to trade. A system that can be corrected only if its citizens spend fifteen hours a week governing it has solved one problem by creating another. If people must become experts in an institution to survive it, or must keep reporting errors, challenging classifications, and organizing to make it behave reasonably, participation has become one more adaptation burden. The design problem is not to maximize participation. It is:
Maximize effective corrective power while minimizing the labor required to exercise it.
The best corrective institution may be one people rarely think about, because it learns on the occasions they do correct it. A correction mechanism that uses up the capacity it is meant to protect has failed in a way its own metrics will not show.
Mechanisms that recur
Across unrelated domains, including medicine, software, bureaucracy, employment, and AI, a few mechanisms recur. Reversibility matters everywhere. Escalation matters whenever frontline staff find problems they cannot fix. Exception capacity matters whenever a standard system meets varied cases. Collective representation matters when individual complaints are too weak to move an organization. Institutional memory matters because correction without retention is endless rediscovery.
These are where political commitments acquire causal force. A right to challenge a decision is close to worthless if using it costs forty hours, specialist knowledge, repeated paperwork, and months without benefits. The test of that right is not whether it exists. It is whether the arrangement turns a mismatch someone experiences into a legible claim, standing, and a revised rule.
The glossary carries most of the parts under their own names: contestability, reversibility, escalation, corrective standing, feedback proximity, preserved capacity, and institutional learning. The open question is empirical, and more tractable than finding the ideal institution: which combinations of these parts produce correctable institutions, and under which conditions?
What it is not
The boundary is easiest to state as a list of retirements. The words need not disappear from the writing. Each stops explaining anything on its own and becomes a question the harder terms have to answer.
Ethotechnics is not a technology for producing good people. The name, which joins ethos (character) to technics, invites that reading. It points at shaping and disciplining the people inside a system, which the argument does not need. The question is how arrangements distribute demands for adaptation, and whether they preserve or consume human capacity.
Ethotechnics is not humane design. Ergonomic interfaces, pleasant bureaucracies, paternalistic nudges, and personalized AI can all count as humane while authority stays insulated. The argument applies harder tests: burden, standing, correction, reversibility, jurisdiction, and capacity.
Ethotechnics is not friction reduction. Friction can protect: waiting periods, procedural hurdles on authorities, documentation requirements for coercive decisions. The question is where friction sits and who has to overcome it, not how little of it remains.
Ethotechnics is not user-centeredness. User-centered design can improve a person’s interaction with a system while leaving the system’s jurisdiction untouched. It can make an illegitimate demand convenient. The prior question is whether this institution should be demanding this from the person at all. The model of a person develops that question through four roles, which show why serving the user can still be hostile to the subject.
Ethotechnics is not resilience. The ability to persevere is not an obligation to compensate indefinitely. No institution can remove all difficulty, so human resilience is indispensable. Because it is indispensable, there are limits on what an institution may demand of it. The resilience of persons is a different thing from the correctability of arrangements. Observed performance has two parts:
observed institutional performance = designed capacity + human compensationWhen the institution leaves the second term out of its accounts, its success is overstated. The compensation can also hide the failure: people who patch errors at their own cost can keep the signal from reaching any alarm. The method separates intrinsic performance, what the formal system achieves, from compensated performance, what people’s absorption covers. It holds to the principle of non-expropriation of resilience: a person’s capacity to adapt does not give the institution a claim on that adaptation.
Ethotechnics is not organizational viability. An institution can stay productive, safe, and adaptable because its people and their families absorb costs that never appear in its measures. Keeping the institution running and improving the lives of the people who run it are different objectives. A reform that makes people’s sacrifices more sustainable may be worth doing. It is not a reform that makes the institution depend on them less, and it should be reported as what it is.
Ethotechnics is not empowerment. Information, dashboards, choices, training, and complaint channels are routinely called empowering while nobody gains the ability to cause reconsideration, reversal, or a rule change. Without corrective standing backed by real capacity, what is called empowerment is better coping.
Ethotechnics is not voice. Institutions can become skilled at hearing without changing. Surveys, consultations, feedback forms, and public comment can increase expression without moving any corrective power. Voice matters only after standing, transmission, and revision are in place.
Ethotechnics is not participation maximization. Participation spends finite human capacity. An institution that requires constant vigilance has moved its governance costs onto its citizens.
Ethotechnics is not adaptability, and not flexibility. Who is adapting, to what, at whose initiative, at whose cost, and with what alternative? An adaptable workforce may be one forced to compensate for rigid management. One actor’s flexibility is often produced by another’s permanent availability. The object of study is how flexibility and rigidity are distributed, not how much there is of either.
Two more words need narrowing rather than retirement. Accommodation leaves the rule intact and makes an exception for the person who cannot conform. That is sometimes right. But repeated accommodations raise the question of why the rule has not changed, and accommodation can become the way correction is avoided. Following the disability-justice critique of compulsory adaptation, Ethotechnics treats the need for exceptional coping as evidence of a defect in the environment, not in the person. Care can compensate for terrible institutions. An ethic of care without an analysis of adaptation sanctifies the human crumple zone, the person who absorbs the failure so the system runs smoothly. Feminist social reproduction theory documents how unpriced care work subsidizes formal economic output. Sometimes the achievement is not more caring people but an arrangement that needs less heroic care.
Where the argument already exists
Ethotechnics does not claim originality for the proposition that human struggle should be reduced, or that institutions exploit unpriced labor to absorb their own failures. Those insights belong to established traditions:
- Post-work socialism and Marx: The distinction between the realm of necessity and the realm of freedom, establishing that technical productivity should reduce compulsory labor rather than intensify it.
- The social model of disability: Shifting attention away from demanding extraordinary individual coping toward altering disabling environments and institutional barriers.
- Relational egalitarianism (Elizabeth Anderson): The principle that individuals are entitled to the social conditions of equal standing and ordinary dignity without having to prove exceptional merit or endurance.
- Feminist care ethics and social reproduction theory (Joan Tronto, Nancy Fraser, Eva Kittay, Alison Reiheld): Analyzing how formal economic success depends on unpriced care labor and identifying "privileged irresponsibility": the systemic offloading of maintenance work onto others.
- Administrative burden theory (Pamela Herd, Donald Moynihan): Empirical measurement of the learning, compliance, and psychological costs imposed on citizens by state and corporate processes.
- Republican political theory (Philip Pettit): Freedom as non-domination, demonstrating that making lives easier does not make people free if they remain subject to unchecked, arbitrary institutional discretion.
- Resilience engineering (David Woods, Erik Hollnagel, Richard Cook): Describing how human operators constantly adapt under resource constraints to bridge the gap between "work-as-imagined" and "work-as-done."
None of these moral propositions is individually original to Ethotechnics. Nor is the mechanism at its center. The fields closest to it each see part of it and stop at a different point:
| Field | What it sees | Where it stops |
|---|---|---|
| Safety science Charles Perrow, Normal Accidents (1984); Diane Vaughan, The Challenger Launch Decision (1996); Sidney Dekker, Drift into Failure (2011); Nancy Leveson, Engineering a Safer World (2012) | Warnings get reclassified as normal until they stop registering, and systems drift toward failure in steps that each look reasonable. Tightly coupled, interactively complex systems propagate an upstream error faster than the people downstream can chase it. | It studies an organization's own operators and its rare catastrophes. Its remedy is a learning culture, not a duty owed to the people a system decides about. An engineering tradition |
| Responsibility in automation Raja Parasuraman and Dietrich Manzey, "Complacency and Bias in Human Use of Automation" (2010); Madeleine Clare Elish, "Moral Crumple Zones" (2019) | When an automated system fails, the blame lands on the nearest human operator, and trust in the automation grows precisely as vigilance over its output decays. | It follows the blame after a failure. It does not follow the evidence that the operator's everyday corrections keep from the rule. Dependence without standing |
| Hidden labor Mary L. Gray and Siddharth Suri, Ghost Work (2019); Hamid Ekbia and Bonnie Nardi, Heteromation (2017) | "Automated" systems run on human work that goes unrecorded and is paid little or nothing. | It treats that work as a question of pay and recognition. It does not treat it as error signals the institution never receives. Absorption as concealment |
| Organizational learning Anita Tucker and Amy Edmondson, "Why Hospitals Don't Learn from Failures" (2003) | Frontline workers fix problems as they appear without changing their causes, and each successful fix keeps the failure from reaching the people who could remove it. First-order problem solving produces an illusory equilibrium: the organization reads the absence of reported failures as health. | It treats the workaround as a learning failure that better reporting or psychological safety would correct. It does not ask what the absorbed work costs, who pays it, or what keeps it necessary once the institution already knows. Absorption as concealment |
| Administrative burden Pamela Herd and Donald Moynihan, Administrative Burden (2018); Cass Sunstein, Sludge (2021) | The learning, compliance, and psychological costs a process imposes on the people it serves, with the waiting itself acting as a rationing device. | It measures the cost. It does not trace how the people paying it keep the rule that causes it from changing. What outcomes hide |
| Due process and contestability Danielle Keats Citron, "Technological Due Process" (2008); Kars Alfrink and colleagues, "Contestable AI by Design" (2023); GDPR, Article 22 (2016) | A person decided about by a machine is owed notice, a hearing, and a way to contest the decision. | It attaches the remedy to one decision. The individual appeal can then become the channel that absorbs the evidence: each decision is reversed and the rule stays. Exception learning |
| AI risk frameworks EU AI Act (2024); NIST AI RMF (2023); ISO/IEC 42001 (2023) | Risk assessed before deployment, human oversight required for high-risk systems, and the system monitored after it ships. | They assess a system before it runs and again after a major change. Monitoring after release is left to the organizations responsible for the system, which then produce the evidence that it still complies. Endogenous authorization |
| Republican political theory Philip Pettit, Republicanism (1997) | Power that is unchecked and arbitrary dominates people even when it is kind. | It looks for a person or office that holds arbitrary power. It has no account of power spread across systems, where no one acts arbitrarily and the people affected have no way back in. Democratic vs. coercive governability |
| Social reproduction theory and care ethics Nancy Fraser, "Contradictions of Capital and Care" (2016); Joan Tronto, Moral Boundaries (1993) | Paid work and formal institutions depend on unpaid care, the work that keeps people fed, rested, and able to cope, and they use it up without counting it. | It describes that drain across a whole economy. It does not ask a particular system to record how much of a person's time and stamina it uses up. The consumption of adaptive capacity |
| Social-cost economics and environmental justice K. William Kapp, The Social Costs of Private Enterprise (1950); Marilyn Waring, If Women Counted (1988); Robert D. Bullard, Dumping in Dixie (1990); Jason W. Moore, Capitalism in the Web of Life (2015) | Costs a firm does not pay are shifted onto workers, households, places, and the future as a regular feature of how accounts are kept. National accounts leave unpaid household work outside production, and hazards settle on the communities least able to refuse them. | It explains why costs land where they do and argues for pricing or regulating them. It does not specify the record an institution keeps of the saving it retains, or the procedure by which the people carrying the cost can send it back. Insulation |
| Labor process theory and organizational sociology Michael Burawoy, Manufacturing Consent (1979); Arlie Russell Hochschild, The Managed Heart (1983) | Workplaces take emotional work and running repairs from staff without crediting them, and win their consent to it. Coping with the job's defects comes to look like a personal virtue. | It criticizes what that does to workers. It does not show how their unrecorded fixes keep the institution's own figures from showing the defect, or ask the institution to record the work. The human subsidy to institutional continuity |
Read together, the stops trace one gap. Safety science follows the lost signal, but inside the organization and after a catastrophe. Due process follows the person, but only as far as their own case. Labor and burden studies count the cost, but not the signal the cost hides. Risk frameworks monitor, but leave the monitoring to the operator. None asks what an institution owes when the person who absorbed the error is outside it, the harm is routine rather than catastrophic, and the rule itself has to be corrected.
Ethotechnics starts from that question. Its claim: institutions absorb the evidence that their automated systems are wrong, and the absorption keeps the error from anyone who could change the rule. The essay on insulation states it in full.
Why the question is urgent now:
- Scale. When Robodebt was automated, debt notices went from about 20,000 a year to 20,000 a week. At that volume, settling errors one case at a time cannot keep up with the rule that produces them.
- Records. A decision log now costs almost nothing to keep. An obligation stated at the level of the record, such as a grant's expiry date or an objection's answer, is a reasonable thing to ask of any operator.
- Law. The EU AI Act requires human oversight of high-risk systems. The GDPR requires a way to contest a solely automated decision with legal or similarly significant effects, where the decision is necessary for a contract or rests on the person's explicit consent. Neither law states a test a running system must pass to show the oversight or the contest works.
What is original here — the theory's own terms for the mechanism, and the instruments that test them:
- Capacity turned into entitlement: An institution notices that people can cover for its deficiencies, builds its operations on the assumption that they will, and turns a one-off act of endurance into a standing requirement.
- Non-expropriation of resilience: That people can adapt to a deficiency does not entitle the institution to their adaptation. When a fixable deficiency is routinely covered by unrecorded effort, good outcomes do not show the arrangement works.
- Intrinsic and compensated performance: Performance a system achieves on its own, set against performance that depends on unrecorded human correction. A monitored buffer that absorbs genuine uncertainty is resilience. Unrecorded work that covers a fixable defect is a subsidy.
- Masking: When people cover for a broken system, its error rate looks low. The institution reads the low rate as health and fixes nothing.
- Evaluation by burdens removed: A system or a reform is judged by whether it removes preventable correction work from people, not only by how much it produces.
- Non-domination, burden accounting, and error-correcting authority: Three commitments a legitimate system has to keep. No one is subject to unchecked power. The time and stamina people spend keeping the arrangement working is counted. And authority lasts only while the errors it causes can still reach someone who will correct them. None of the three follows from the others.
- Corrective standing as epistemic admissibility: Corrective standing is not a veto that lets one person stall a system. It is a rule about evidence. An institution that shuts out the evidence from the people who bear its failures loses its claim to be right, and its warrant to keep running the system.
- Stewardship versus counterfeit buffering: A person kept in the loop is a steward when the role is voluntary and they can override the system without penalty. They are a counterfeit buffer when the work is compelled and unrecorded: they catch the system's errors and take the blame, and the errors never reach anyone who would redesign it.
The claims meet established fields, and the fields push back. Each claim's strongest counter, stated in its own terms, the answer, and the measurement that would settle it:
| Claim | Strongest counter | The answer | What would settle it |
|---|---|---|---|
| Apparent institutional performance often rests on unmeasured human compensation. IT productivity economics (Erik Brynjolfsson and colleagues) | Enterprise digitization yields genuine productivity gains once an adoption lag passes; workarounds are transient user adaptation, not permanent extraction. | Whether adaptation is transient or structural is an empirical question nobody can settle yet, because nothing measures the adaptation. A system that does not record the labor it consumes cannot tell a learning curve from a subsidy. The dispute is falsifiable; what is missing is the instrument. | the burden dashboards |
| Generated output shifts the cost of verifying truth onto its reader, and no metric that counts generation will ever see it. Ambient clinical documentation trials | Trials report high clinician satisfaction, reduced subjective administrative burden, and low observed error rates in routine primary care encounters. | Satisfaction is self-reported and would not detect a cost paid after hours; low error rates in routine encounters bound the claim without touching high-ambiguity work. The honest response is measurement rather than rebuttal — instrument the verification cost and let the number decide. | the claim-anchoring eval |
| Errors propagate through tightly coupled systems faster than correction can chase them, and nominal reversibility is not operational reversibility. Medication-safety research on interception | Multi-tiered human redundancy intercepts a large share of prescribing and transcription errors before they reach the patient, so informal checks function as a resilient defense. | Interception is real, and it is the finding the framework starts from: safety that depends on unmeasured vigilance is the human subsidy, and the interceptors are unbilled. The question is not whether interception works but whether it is recorded as evidence about the system or absorbed as evidence about the people. | the rescue register |
| Delay functions as an unlegislated rationing device that suppresses claims more effectively than an explicit denial. Health economics (moral hazard and demand management) | Prior authorization and review queues are legitimate cost control: they deter moral hazard and require providers to demonstrate medical necessity before funds are committed. | A queue may ration legitimately, but only as a declared policy with evidence, an owner, and a clock. Choosing not to fund is a decision with reasons and a date. What the framework refuses is rationing that arrives as friction nobody authored — and delay falls hardest on the least persistent, which makes undeclared rationing regressive. | the expiry default and deliberate non-use |
| Institutions enforce rules whose supersession they hold somewhere in the organization. Evidence-based medicine and regulatory science | Slow adoption is an epistemological safeguard: many trial endpoints rely on surrogate markers that never translate to survival benefit, so conservatism protects patients from commercial overhype. | The clause forces the review, not the adoption. Held evidence fires a trigger, and a payer may reject the new evidence with recorded reasons and confirm the grant. What it forbids is skepticism nobody performed. Slow uptake with a record is judgment; slow uptake without one is an outdated rulebook. | the unwired-evidence term |
| Empathy displays substitute for structural repair and absorb the pressure to change. Occupational health psychology (Christina Maslach, Michael Leiter) | Secondary interventions — peer support, mindfulness, institutional recognition — produce measurable reductions in exhaustion, depersonalization, and turnover intent. | The distinction is substitution, not existence. Peer support that complements redesign is not theater; a wellness program offered in place of changing the workload is. The test is whether the intervention alters the system that produces the burden or only helps people survive it. | the ethics-theater term |
What remains to be built is not another general theory of what emancipation ought to mean. It is the instrument: obligations a running system can fail, records an auditor can read, and public cases scored against both. The About page lists each obligation with its clause number.
The questions that replace the vocabulary
The last retirement is the founding ambition. Ethotechnics does not specify the good institution. It assumes that no institutional form removes mismatch, no designer anticipates every remainder, no procedure guarantees justice, and no criterion captures the whole human good. So it does not ask how to design the institution correctly. It asks whether the institution’s errors become somebody else’s permanent burden.
The older picture ran from good intentions through good design to good outcomes. The replacement runs from mismatch to retained learning:
inevitable mismatch → visible burden → corrective standing → institutional adaptation → retained learningIn place of the retired words: who adapts, who pays, who can correct, what changes when correction succeeds, and how much human capacity the arrangement consumes in the meantime.
What the laws take from this
- Law IV: every consequential delegation creates a correction obligation. Correction capacity is a stated quantity the institution is measured against, not an intention.
- Law VI: nominal reversibility is not operational reversibility. This is the gap between a norm and its mechanism, written as a test.
- Law VII: error-bearing parties require standing proportional to exposure. It answers “who can correct” with a procedure: a challenge is received, answered, and able to change state.
- Law VIII: observability without state transition is theater. That is voice without revision, named.
- Law XII: no system may erase the conditions of its own contestability. It is the protective side as a constraint: a correction mechanism may not use up the capacity it exists to protect.
None of these laws uses a retired word. Each asks what changes, and for whom, when the system is wrong.