
A bridge is competent when it holds, and keeps holding when trucks cross, winds rise and inspectors check the bolts.¶ 1 (permalink to paragraph 1)
In Caring Democracy (2013, p. 35), Joan Tronto insists that “assuming responsibility is not yet the same as doing the actual work of care.” Competence is about execution: working code that does what it promised, audited, explainable, and safe-to-fail. Deployment controls (traces, sandboxes, canaries) make failure inspectable.¶ 2 (permalink to paragraph 2)
And crucially, Tronto adds (p. 35), “to be competent to care, given one’s caring responsibilities, is not simply a technical issue, but a moral one.” Aimee van Wynsberghe later carried Tronto’s framework into robot design. A system that ships broken care with good intentions has failed morally as well as technically. The promise was made; the bridge did not hold.¶ 3 (permalink to paragraph 3)
The illustration’s framing: We check the process. That means transparency and fast operational feedback on how care is delivered, with no “just trust us.” In a Civic AI context, trust is earned step by step through demonstrated, inspectable practice. That is what Onora O’Neill calls trustworthiness, which transparency alone does not produce.¶ 4 (permalink to paragraph 4)
Start in your room
Ask of any AI doing a job in your room: “Can we check what it did, and stop it before more harm?” Rehearse the pause with the people who would have to use it, and read the record of what the system did before you let it take on more.¶ 5 (permalink to paragraph 5)
Definition
- Safety is a property of practice. Competence is demonstrated in operation.¶ 6 (permalink to paragraph 6)
- Proof before promotion: the Apprentice Model. Features graduate like apprentices: shadow mode → canary → general with guardrails.¶ 7 (permalink to paragraph 7)
- Observability over opaqueness. A “show your work” approach, with decision traces, source citations, uncertainty scores and explainable summaries tied to decisions, makes the system observable. (Observability here means the traces are inspectable: a record of what was consulted, which policy rule, if any, applied, and what uncertainty was reported. Traces help people audit an action but do not reveal the model’s internal reasoning. Access must protect private interactions.)¶ 8 (permalink to paragraph 8)
- Least power. Use the simplest mechanism that can do the job. This is Tim Berners-Lee’s principle for the web, applied to care. Each extra component gives failure, confusion or attack one more place to enter.¶ 9 (permalink to paragraph 9)
- Fail safely. When evidence is weak or a component drifts (its behaviour departs from what is expected), the system narrows scope, hands off to a human, or pauses.¶ 10 (permalink to paragraph 10)
Why it matters
Public promises fail unless execution is visible, testable and reversible. Pack 2 binds commitments; Pack 3 asks whether the system actually delivers on them. For Civic AI, people should be able to inspect safety in operation, without taking the vendor’s intentions on trust.¶ 11 (permalink to paragraph 11)
Limits set slowly make fast execution answerable. Engagement contracts, red lines, severity classes and pause triggers (Pack 2) are set slowly, because their purpose is durability. Inside them, a Kami can act at machine speed under precommitted brakes, shadow modes, canaries and reversible defaults. The guardrails that make fast decisions answerable need deliberation. Most individual decisions do not.¶ 12 (permalink to paragraph 12)
The Apprentice Model
The staged-competence pattern has a name and a lineage: the apprentice. A master machinist in Taichung knows from the sound of the spindle whether a tool is about to chatter; a ward nurse hears, at three in the morning, the difference between a patient’s usual snoring and the pauses in breathing that warrant waking the doctor. This is tacit knowledge, Michael Polanyi’s term in The Tacit Dimension for what we know but cannot fully tell.¶ 13 (permalink to paragraph 13)
When the relationship goes wrong, the failure is concrete. A vendor demo enables “autonomous feed optimisation.” The co-pilot stops waiting for the machinist to accept a proposal and begins adjusting spindle speed and depth on its own because the benchmark chart looked good in the lab. For a few minutes the cuts look cleaner on paper. Then the sound changes. The machinist reaches to slow the feed and discovers her override is no longer the default path: the system argues, delays, or treats her input as an exception. The apprentice no longer informs her decisions. It directs the cultivator.¶ 14 (permalink to paragraph 14)
Van Wynsberghe drew this line for lifting robots on a ward more than a decade ago: an enabling robot shares the practice with the carer, so that responsibility “becomes a hybrid event between the human care-giver and the robot”; a replacement robot takes the whole practice and, on Tronto’s terms, “does not meet the requirements of a good carer” (2013, pp. 423, 427–428).¶ 15 (permalink to paragraph 15)
The apprentice is an enabling system by design, and the vendor’s “autonomous feed optimisation” is the moment it is quietly re-classed as a replacement. Lisanne Bainbridge named the trap in 1983 as the ironies of automation: the operator asked to take over when automation fails is the one automation has deskilled.¶ 16 (permalink to paragraph 16)
Civic AI enters such settings as a digital apprentice. It observes in shadow mode, records decision traces, and learns the tacit knowledge of this workshop, this ward, this community before it is trusted to suggest, let alone act. The lineage is older than the chatbot: J. C. R. Licklider’s man–computer symbiosis (1960) and Douglas Engelbart’s augmenting human intellect (1962) both kept the human at the wheel.¶ 17 (permalink to paragraph 17)
The cultivator keeps three things here: the steering wheel (execution stays under human direction), the brake (one prominent control that stops the machine now, wired directly and tested regularly), and the maintenance manual (traceability of which rules fired, which inputs guided the output, and who repairs the model when it fails). Together they are the tracking and tracing conditions of what Santoni de Sio and van den Hoven call meaningful human control. Portability and exit belong to Pack 5’s solidarity work. The test here is whether inspectability and override work in the room before any contract clause counts.¶ 18 (permalink to paragraph 18)
What it looks like in practice
- Graduated release: the Apprentice Model. New policies run as apprentices: shadow mode first, then canary release to a small, stratified slice of real cases, then general rollout with rollback primed.¶ 19 (permalink to paragraph 19)
- Decision traces. Every denial, recommendation, or escalation has a trace: which rule, which sources, uncertainty score, and a receipt link.¶ 20 (permalink to paragraph 20)
- Guardrails as code. Rights and red lines expressed as machine-checkable rules (deny-by-default when ambiguous).¶ 21 (permalink to paragraph 21)
- Security as a care obligation. Security belongs in competence because a capable AI system can harm people through the permissions it receives. When a Civic AI system can read files, change records, or act on someone’s behalf, over-broad permissions spend the cared-for person’s trust without returning to ask.
- Least privilege, strict sandboxing, validated inputs, and tested egress controls define what the apprentice may touch, how far a confused instruction can travel, and who can stop it before a breach becomes a care failure.¶ 23 (permalink to paragraph 23)
- Working fallbacks. If confidence drops or a dependency fails, the system uses a reversible default, routes to a human, or pauses within the promised window.¶ 24 (permalink to paragraph 24)
- Data minimalism. Every unnecessary field retained after handoff creates another promise to secure it; if the system has no care purpose for the data, competence means not collecting it, or letting it go.¶ 25 (permalink to paragraph 25)
- Reproducible builds. Configs are versioned; one-click replays re-create results.¶ 26 (permalink to paragraph 26)
From ideas to practice
- Derive specs from contracts. Convert Pack 2 engagement contracts into acceptance tests.¶ 27 (permalink to paragraph 27)
- Instrument for observability. Emit decision traces with links to sources and receipts (from Pack 1).¶ 28 (permalink to paragraph 28)
- Run shadow mode. New policy sees inputs and proposes actions but doesn’t act. Compare to human/previous system. Shadow mode is the apprentice watching over the cultivator’s shoulder.¶ 29 (permalink to paragraph 29)
- Canary safely. Release to a small, stratified slice of real cases with automatic rollback if drift exceeds the limit. A canary is a probe, not a stand-in for the public.¶ 30 (permalink to paragraph 30)
- Audit before general. Conduct independent audit of evals, logs, and guardrails; publish an attested report with the verified execution rate: the share of audited decisions that pass guardrails with a usable trace.¶ 31 (permalink to paragraph 31)
- Generalise & monitor. Enable for all; watch drift monitors; keep pause wired.¶ 32 (permalink to paragraph 32)
- Post-incident learning. Maintain blameless reviews; fixes become tests.¶ 33 (permalink to paragraph 33)
Buildable tools
- Shadow/canary orchestrator with rollback switches.¶ 34 (permalink to paragraph 34)
- Decision trace schema. Inputs, rules fired, sources, uncertainties.¶ 35 (permalink to paragraph 35)
- Guardrail engine. Policy-as-code for rights/consents.¶ 36 (permalink to paragraph 36)
- Drift monitors. Data, performance, fairness.¶ 37 (permalink to paragraph 37)
- Shared eval registry. Versioned tests, provenance, and localised test suites. This is the same public registry that receives Pack 4’s community-authored evals, which become release gates here.¶ 38 (permalink to paragraph 38)
- Replay tooling. One-click re-runs for audits, incidents, and appeals.¶ 39 (permalink to paragraph 39)
- Fallback router. Confidence thresholds that trigger human handoff or pause.¶ 40 (permalink to paragraph 40)
One case: the flood-bot
This is a fictional composite, an illustration rather than operating evidence. The one-week shadow period, 10 percent trial and 15 percent rollback trigger are teaching values in this fictional example, not tested thresholds or recommended defaults.¶ 41 (permalink to paragraph 41)
- Shadow → canary. A new “residence-documentation waiver” runs in shadow for a week; then canaries to a stratified 10 percent slice of livelihood claims, with demographic and geographic balance enforced; rollback bound: appeals above 15 percent. The waiver replaces the “30-day proof” rule rolled back in Pack 2.¶ 42 (permalink to paragraph 42)
- Observability. Every denial has a trace: which rule, which sources, uncertainty score, and a receipt link for the claimant.¶ 43 (permalink to paragraph 43)
- Safe fallback. When uploaded documents are unreadable or confidence drops, the bot uses a reversible default and routes the claim to a human caseworker.¶ 44 (permalink to paragraph 44)
What could go wrong
- Unsafe confidence. The system acts despite weak evidence. Fix: Confidence thresholds, fallback routing, and pause on ambiguity.¶ 45 (permalink to paragraph 45)
- Data leakage. Evaluation information leaks into training or model selection. Evals look good; reality fails. Fix: Hold-out datasets, randomised spot checks, live A/Bs with rollback.¶ 45a (permalink to paragraph 45a)
- Opaque “black box.” “Trust us” explanations. Fix: Traceable summaries + public examples; auditors can reconstruct decisions.¶ 47 (permalink to paragraph 47)
- Canary bias. Canary slice is unrepresentative. Fix: Stratify sampling; publish canary demographics. A canary that proves performance only on easy cases is a ceremony.¶ 48 (permalink to paragraph 48)
- Security drift. Permissions expand quietly as the system is extended, turning a once-adequate least-privilege footprint into an attack surface. Fix: Regular permission audits; treat scope creep as a care failure.¶ 49 (permalink to paragraph 49)
- Imported proof. Evidence from favourable soil (Taiwan, California, Japan, places with unusually strong civic infrastructure) is treated as if it transfers with the software. The mechanism may transfer; the institutional conditions do not automatically. Fix: treat named cases as proof of a mechanism, and earn competence again in each new setting, with fresh shadow mode, a stratified local canary and community evals passed, before general release.¶ 50 (permalink to paragraph 50)
Interfaces
- From Attentiveness (Pack 1): high-caution areas become the first small trials, designed to fail safely before trust is granted.¶ 51 (permalink to paragraph 51)
- From Responsibility (Pack 2): specs, SLAs, brakes.¶ 52 (permalink to paragraph 52)
- To Responsiveness (Pack 4): competence delivers; responsiveness checks whether it worked. Incident loops and eval results feed Pack 4.¶ 53 (permalink to paragraph 53)
- To Solidarity (Pack 5): dependable, well-instrumented systems make cooperation and public audits credible.¶ 54 (permalink to paragraph 54)
- To Symbiosis (Pack 6): competence proves a system is ready to stay local.¶ 55 (permalink to paragraph 55)
A closing image: the bridge with inspection tags
Imagine a well-kept bridge with inspection tags — date, load test, next check — visible to anyone crossing. Competence is the proof that someone checked, and will check again. The deployment stages are the inspection schedule; the decision traces, the inspection records; the blameless incident reviews, the reports filed when something was found wrong.¶ 56 (permalink to paragraph 56)
Sources for this pack
- Tronto, Caring Democracy (2013), p. 35 — the quotations above; Moral Boundaries (1993), pp. 127–137 — competence as a moral element; van Wynsberghe, “Designing Robots for Care” (2013), pp. 423 and 427–428 — enabling versus replacement.¶ 57 (permalink to paragraph 57)
- Polanyi, The Tacit Dimension (1966); Lave and Wenger, Situated Learning (1991) — tacit knowledge and apprenticeship.¶ 58 (permalink to paragraph 58)
- Licklider, “Man-Computer Symbiosis” (1960); Engelbart, “Augmenting Human Intellect” (1962) — the co-pilot lineage.¶ 59 (permalink to paragraph 59)
- Bainbridge, “Ironies of Automation” (1983); Santoni de Sio and van den Hoven, “Meaningful Human Control” (2018) — why the brake and the manual are conditions of meaningful control.¶ 60 (permalink to paragraph 60)
- Berners-Lee and Mendelsohn, “The Rule of Least Power” (2006); Saltzer and Schroeder, “The Protection of Information in Computer Systems” (1975) — least power and least privilege.¶ 61 (permalink to paragraph 61)
- O’Neill, A Question of Trust (2002) — trustworthiness, and the limits of transparency.¶ 62 (permalink to paragraph 62)
- Kaufman, Rosset, and Perlich, “Leakage in Data Mining” (2011); Allspaw, “Blameless PostMortems” (2012); Lunney and Lueder, “Postmortem Culture” (2016); Fowler, “Circuit Breaker” (2014) — the engineering practices borrowed here.¶ 63 (permalink to paragraph 63)
- The full trail is on the Sources page.¶ 64 (permalink to paragraph 64)
