The record you cannot get

The story we tell about opaque decisions is usually a story about absence. The machine decided, and there was nothing behind it — no reasons written down, no trail, a verdict pulled out of the air. That story is comforting in its way, because a void is at least honest about being a void. But it is not, in most cases, what happened. What happened is that a record was made. The inputs were captured, the score was computed, the reasons were logged, the rule that applied was the rule in force that day, and all of it was written to a file with your name on it. The record exists. You simply cannot get it. That is a different harm than the absence of a record, and a worse one, because the absence at least matches your powerlessness while the presence mocks it.

Try to obtain it and you learn the shape of the wall. The request routes to a portal that returns a summary — a few sentences that describe the outcome you already know in language too smooth to argue with. The support line reads from a script and the script does not have the field you are asking about. The formal request produces a page with the substance blacked out, or a letter explaining which exemption applies, or nothing at all, past a deadline you were not told about. At every turn you are handed a representation of the record and denied the record. And the representation is always the version that requires nothing further of the institution and offers nothing usable to you.

The file that exists and excludes you

The specific insult here is not the same as being told there was nothing to see. If a system genuinely held no account of how it treated you, its silence would be a kind of poverty — regrettable, but not personal. What you are told instead is subtler and sharper: there is something, and it is not for you. The file is real enough to be redacted. It is complete enough that someone could read it, decide which portions you may glimpse, and withhold the rest. The blacked-out page is proof of the thing it conceals. You are not looking at an empty drawer; you are looking at a drawer someone locked while you watched, holding a folder they will not turn around.

This is the experience the receiving end knows and the org chart does not. From inside the institution, the record is an asset — evidence that the process was followed, that the decision was defensible, that the box was checked. It is written for the reviewer, the auditor, the regulator who might one day ask. The affected person is the subject of the file, never its reader. And a document written to satisfy everyone except the one person it is about will, reliably, be exactly the document that person cannot use. The summary is not an accident of bad service. It is the record performing its actual function, which was never to inform you.

The cruelest kind of secret is the one kept about you, from you — a file with your name on it that you are the last person allowed to read.

You cannot fight blind

Every system that makes adverse decisions offers, somewhere in its literature, a right to appeal. You may contest the outcome. You may ask for review. What almost none of them offer alongside it is a right to the file the outcome rested on — and without that, the appeal is a ceremony. To contest a decision is to say it got something wrong: a fact it had was false, a fact it lacked would have mattered, the rule was misapplied, the weighing was perverse. But you cannot name what was false in evidence you have not seen. You cannot supply what was missing from a basis you were never shown. A right to appeal without a right to the record is a right to argue against a case that is never read into the room — you are asked to rebut a conclusion while the reasoning stays sealed. That is not a hearing. It is a formality that produces the paperwork of a hearing.

Understand what access actually secures, because it is more than a chance to win. It is the precondition of three things the affected party has no other route to. It is the precondition of contest — you cannot dispute what you cannot examine. It is the precondition of correction — you cannot fix an error in a record you are not permitted to inspect for errors, and errors in these files are not rare; they are the ordinary condition of any large system fed by imperfect data. And it is the precondition of plain understanding — the ability to know why your life bent the way it did, which a person is owed even when nothing can be undone. This is the through-line of the receiving end: your own facts have to be able to reach the decision that is made about you. When the record is sealed, they cannot, and you are left disputing an outcome with a system that has kept the only copy of what it claims to know.

What access requires

The honest objections deserve to be met, because they are real and they are not the same as the wall. A record can contain the private information of third parties — another person named in your file, a source who supplied a fact. It can touch genuine security concerns, where disclosing certain detail would defeat the purpose of the check. And the model itself may carry claims of trade secret, a vendor's proprietary weighting that the institution does not itself fully hold. These are reasons to redact. They are not reasons to withhold the whole. A third party's name can be masked while the fact attributed to them is disclosed. A security-sensitive method can be protected while the input it consumed is returned to the person it concerns. The existence of something legitimately shielded in a file is not a license to shield the file.

And the parts least defensible to keep are precisely the parts you most need: your own data, and the basis for your own adverse decision. Your inputs are not anyone's secret — they are your life, entered into a form. The rule that applied to you is not proprietary — it is the standard you were held to, and a standard applied in secret is not a standard, it is a discretion wearing one's clothes. A record built for the individual — the inputs a decision rested on, the basis it turned on, the rule in force at the moment it was made — is not a courtesy the institution extends when it is feeling generous. It is what a decision owes the person it lands on. This is what a Decision Receipt is for, and it is the whole difference between the two things a redaction can be protecting: a genuine third party, or the decider from scrutiny. Confuse them and every file becomes a fortress. Keep them separate, and the person on the receiving end finally has something to hold.

So when you are handed the summary, the script, the blacked-out page, ask the question the wall is built to prevent: not was there a record — you know there was — but why is the one person the record is about the one person forbidden to read it? There is a defensible answer for the third party's name. There is no defensible answer for your own. And the distance between those two answers is the exact measure of whether the redaction is protecting anyone but the institution holding the pen.

— Dispatches · Summit Cognitive