Born marked

Every batch of medicine manufactured in the European Union sits in quarantine until a named human being releases it. The role carries a formal title, Qualified Person, and the certification is personal rather than institutional, which means the batch is not released because the tests passed. It is released because someone whose name is on the register read the tests and said so. Quarantine is the default state of the material, not a punishment applied to suspicious batches, and the whole architecture rests on that ordering.

We run the same discipline over prose. A machine-assembled research corpus in our own estate quarantines every newly written entry at an internal-review-only band by default, and the autonomous loop that produces the writing has no path to place anything higher. Above that band sit two more, and below it sits a hard veto. Promotion to the band that permits verbatim use in front of a person is never automatic under the default policy, requires an explicit human approval step, and the command-line runner deliberately does not expose the flag that would switch that requirement off. The engine composes its checks and returns a recommendation with an ordered list of one-sentence reasons, the first of which is always the dominant driver, so a promotion that happens can be read back to the sentence that permitted it.

The mechanism is the ordering, not the ladder. Marking at birth puts the burden of proof on the material rather than on whoever later has to doubt it, and a rung that can only be climbed by a named human act cannot be climbed by an accumulation of passing checks. Reverse the default and the same four bands become theatre, because everything is already at the top and the marks are applied by whoever happens to be worried that week.

The two upper rungs answer questions that are constantly collapsed into one and are not the same question. Safe to load into a model’s context window asks whether a passage can inform an answer. Safe to quote to a person asks whether the words themselves can be republished, with everything that carries about attribution and about somebody else’s copyright. A passage can pass the first and fail the second all day long, and giving them separate bands is what stops a single clearance decision from silently answering both. Systems that maintain one notion of safe are not being simpler. They are answering the harder question with the easier question’s evidence.

The asymmetry at the bottom of the ladder is the part that looks like an oversight and is a ruling. Promotion is automated up to the rung where a human is required; demotion is manual all the way down, because a blocked entry is a remediation task rather than an automation task. Automating the downgrade would look like symmetry and would function as a disposal chute, moving failures out of the queue at machine speed without anyone rewriting the passage or reconciling the citation that failed. The block is meant to sit there, visible, costing something, until a person fixes what it is pointing at.

None of this depends on how good the writing is, which is the point people find hardest. A machine-written passage can be better than the human-written one beside it and still belong at the bottom rung, because the band is a record of where a sentence came from and not a verdict on its quality. Keep that record from birth and the corpus keeps a capability that cannot be reconstructed later at any price, which is the ability to say what it wrote itself, and a body of knowledge that can answer that question is one that can keep growing without ever having to be taken on faith.