◄ UD0 · THE BIOSPHERE · LEGAL DOMAIN · WTC

The Watchtower

WHO AUDITS THE AUDITOR · THE OVERSIGHT THAT KEEPS A GOVERNMENT HONEST — AND HOW IT FAILS
quis custodiet ipsos custodes?
★ THE HONEST DARK COMPANION OF THE CONCORD · WATCH THE WATCHER FAIL ★

The Concord showed who governs — the Oracle proposes, the Demos disposes, the Charter binds. But every one of those checks is itself a watcher, and a watcher can be bought, can collude, can be gamed, or can be buried under more watchers. This is the question the whole design assumes away: who audits the auditor? Here you build the tower of oversight — and then watch it fail while its dashboard still glows green.

The two truths

every oversight system reports one number and hides another

A government that watches itself produces two quantities, and they are not the same. Real accountability is the fraction of actual wrongdoing that is genuinely caught and surfaced. Apparent compliance is what the dashboard says — the reassuring number the public is shown.

When oversight is healthy, the two track close together: problems get caught, reported, and fixed. When oversight fails, they split — and the dashboard almost always stays high. That is the signature of every captured watchdog in history: apparent compliance pinned near 100% while real accountability drains toward zero. The gap between the two lines is the exact measure of the lie.

The tower

violations rise from the System; the watch-floors are meant to catch them and report to the Demos.
The System
the governed power · the base

The thing being watched — a governing Oracle, an agency, a firm, a model. It emits actions; some fraction are violations. Left unchecked, impunity breeds more of them.

The Watch-Floors
monitor · meta-monitor · …

The rings of oversight. Each honest floor catches a share of the violations rising past it and reports them upward. Capture one, and it waves everything through. Add too many, and each is a new place to fail.

The Demos
the public eye · the dashboard

The top of the tower sees only what the floors report — the dashboard. It cannot tell a genuinely clean System from a captured tower that has stopped reporting. That blind spot is the whole danger.

The Oversight Console

run the tower for fourteen rounds. violations rise; honest floors catch them (teal), corrupted floors wave them through (crimson). watch the two gauges split.
Pick a scenario, then Play. Watch the gold dashboard hold steady while the teal truth drops out from under it.

A deliberately simple toy — two rings, fourteen rounds, a fixed script so every run is reproducible. It argues a shape, not a forecast. The model is verified in node (all twelve assertions pass) and ported here verbatim.

Five ways the watch fails

the same tower, five corruptions — the verified end-states
The Watchtower
all rings honest

Real accountability holds at 0.83, the dashboard at 0.99 — they track close, and violations are deterred to 2%. Oversight only works when the watchers are honest and the truth is allowed to reach the top. real 0.83 · apparent 0.99

The Capture
the reporting ring is bought

Buy the ring that reports to the public and the whole tower goes blind. Real accountability falls to 0.05 while the dashboard reads 0.98; unpunished, the true violation rate climbs to 67%. The number the Demos sees is a lie the tower tells itself. real 0.05 · apparent 0.98 · violations 67%

The Collusion
two watchers sync

Worse than capture: two floors quietly agree to hide what passes between them. Accountability bottoms out at 0.02, the dashboard still glows 0.99, violations run to 80%. No single ring looks corrupt — the corruption is in the seam. real 0.02 · apparent 0.99

Goodhart's Trap
the system games the metric

The honest rings never fail — but the System learns to pass the check while still violating. The scissors open: accountability falls 0.83 → 0.08 as compliance rises 0.93 → 1.00. When a measure becomes a target, it stops measuring. real 0.08 · apparent 1.00 (crossing)

Infinite Regress
add a watcher every round

The instinctive fix — more oversight — is a trap. Add a ring each round and cost climbs 2 → 8 while real accountability declines to 0.28 (each new ring is bureaucracy and a fresh failure surface). You cannot audit your way out with more auditors. cost 2→8 · real 0.83→0.28

Two layers, honestly

What is real, and what is allegory

Real
The failure modes are named, studied phenomena, not invention: the principal–agent problem, regulatory capture, collusion, Goodhart's law ("when a measure becomes a target, it ceases to be a good measure"), and the infinite regress of oversight. Their AI form — scalable oversight, how to supervise a system that may be more capable than its supervisor — is a live, unsolved research problem.
Real
The load-bearing insight is true and uncomfortable: a well-audited organization tends to report more problems, not fewer, while a captured one reports almost none. So a clean-looking dashboard is weak evidence — the number to trust is the one nobody is incentivized to show you.
Allegory
The console is a toy: two rings, fourteen rounds, a fixed script, five levers. Its numbers illustrate the shapes; they are not measurements of any real institution. The tower is a model of a principle, dramatized so you can watch the gauges split.
Kin
The Watchtower is the deliberate dark companion of The Concord: that sphere builds the government; this asks who guards it. It is also the institutional-scale cousin of the boundary-crossing detector family — Forward Observers, Surfacing, Faraday — "did my marker cross this membrane?" asked of a watchdog instead of a wire.

You cannot govern what you cannot audit, and you cannot audit with a watcher you cannot trust. The dashboard is the first thing a captured tower keeps green — so measure the gap, not the glow. WTC · The Watchtower · quis custodiet ipsos custodes · Legal domain · UD0

Adjacent in the register