Threshold Release Rule¶
Procedure — instantiates Opinion Climate Recalibration Design
Releases aggregate or representative signals only when safety, sample size, and anti-identification conditions are met.
Having a protected signal is not the same as being allowed to show it. Threshold Release Rule governs the moment in between: a condition set in advance that keeps a protected signal sealed until safety is assured — a minimum number of contributors, aggregation coarse enough to prevent identification, a trusted custodian's sign-off — and only then permits release. Its defining feature is that it is a gate on disclosure, decided beforehand, rather than an act of collecting signal or publishing it. It stands between "we hold this" and "we may reveal this," and its whole logic is refusal until the pre-set conditions hold.
Example¶
A university stands up an information-escrow system for misconduct reports. A student can log a complaint about a named person, but the entry stays sealed and invisible — to administrators and to everyone else — unless a second, independently filed complaint about the same person arrives. That match is the threshold. Only then does a trusted custodian verify the anti-identification conditions and surface the paired reports; a lone entry below the match threshold is never exposed, and the released form reveals only what the rule permits, for the purpose the rule allows. The effect is that no student is ever left standing as the sole visible accuser. Release happens exactly when corroboration and safety both hold, and never before — which is what makes it safe to report at all.
How it works¶
- Define the release conditions in advance. The rule fixes the count, the aggregation floor, the custodian sign-off, and any time delay before any signal is held, so release is never an ad-hoc judgment call.
- Hold below threshold. Anything short of the conditions stays sealed — the default is non-disclosure, not disclosure.
- Verify anti-identification. Before release, a check confirms the surfaced form cannot fingerprint an individual or a small subgroup.
- Release only the permitted form, for the permitted use. What comes out is bounded — the aggregate or matched pair the rule allows, scoped to what it may be used for.
Tuning parameters¶
- Threshold count — how many contributors or matches are required before release. Higher protects better but can freeze a real signal indefinitely.
- Aggregation floor — the minimum cell or group size shown. A higher floor prevents re-identification but hides finer structure.
- Custodian model — who holds the signal and verifies release, and how independent they are. Trust in this actor is the whole rule's foundation.
- Time delay — whether release waits a set interval after conditions are met, buffering against reactive harm.
- Released form — what shape the signal takes on release (aggregate, matched pair, anonymized statement) and what use it is scoped to.
When it helps, and when it misleads¶
Its strength is encoding the logic of an information escrow[n1] — a trusted holder that releases a report only when a pre-set condition, such as a matching report, is met — so that no individual bears the exposure of going first alone. It converts "should we reveal this yet?" from a nerve-testing judgment into a rule agreed before anyone is at risk.
Its failure mode is the over-tight gate: a threshold set so high, or an aggregation floor so coarse, that nothing ever clears it, and a real distortion stays frozen behind a rule that protects by never acting. The mirror failure is a leaky custodian who releases early or selectively, which destroys the trust the whole mechanism runs on. The classic misuse is gaming the threshold to suppress — setting conditions that can never be met precisely so the signal stays buried. The guarding discipline is an independent, credible custodian and a published rule, so participants can see the gate is real and fair before they trust it with anything.
How it implements the components¶
isolation_and_retaliation_boundary— the anti-identification conditions guarantee no contributor is exposed below threshold, keeping release from becoming forced visibility.trusted_bridge_actor_map— a trusted custodian holds the signal and performs the verified release, standing between the contributors and the audience.decision_use_boundary— the rule scopes what the released signal may be used for, not just when it appears.
It does not collect the signal it gates — the pre-sequence measurement of the private distribution, private_distribution_probe / opinion_climate_model, is held by Anonymous Pre-Expression Poll, and the protection of independent first expression, first_voice_safety_support / visible_expression_trace, by Silent-Start Written Input — both procedure twins: those collect or reorder signal, whereas this rule decides whether any collected signal is safe to surface at all.
Related¶
- Instantiates: Opinion Climate Recalibration Design — the release rule is the "make pluralism visible in calibrated steps, safely" gate.
- Consumes: Anonymous Pre-Expression Poll or Confidential Opinion Climate Survey supplies the raw protected signal this rule decides whether and when to release.
- Sibling mechanisms: Aggregate Pluralism Disclosure · Anonymous Pre-Expression Poll · Confidential Opinion Climate Survey · Moderated Minoritarian Voice Window · No-Retaliation and Follow-Up Protocol · Perceived Consensus Correction Note · Post-Intervention Climate Audit · Silent-Start Written Input
Editorial Notes¶
Form Classification¶
Form family: Rule, Policy & Commitment
Rationale: Threshold Release Rule operates as a standing rule, threshold, contractual commitment, or policy constraint governing future conduct because it releases aggregate or representative signals only when safety, sample size, and anti-identification conditions are met.
Independent corroboration: The frozen evidence defines Threshold Release Rule as 'Releases aggregate or representative signals only when safety, sample size, and anti-identification conditions are met', so its operative form is Rule, Policy & Commitment.
Nearest alternative: Decision, Gate & Allocation — Threshold Release Rule includes features of a case-specific gate, selection, routing, prioritization, or resource disposition, but its defining operation is a standing rule, threshold, contractual commitment, or policy constraint governing future conduct.
Review outcome: Independent reviewer agreement; medium confidence.
Origin Attribution¶
Primary origin: Law & Governance
Origin pattern: Cross-disciplinary synthesis
Present-day reach: Universal
Rationale: Threshold release rule derives most directly from law and governance's rule, authority, accountability, and due-process tradition; its defining operation is to releases aggregate or representative signals only when safety, sample size, and anti-identification conditions are met.
Related originating lineages:
- Public Administration & Policy — Public administration's program, regulatory, and service-governance tradition provides a formative adjacent lineage for the same threshold release rule operation.
- Statistics & Experimental Design — Statistics, experimental design, and measurement theory supplies a parallel or contributing lineage for the mechanism's defining operation: releases aggregate or representative signals only when safety, sample size, and anti-identification conditions are met.
- Ethics of Technology & AI Governance — Technology ethics and ai governance supplies a parallel or contributing lineage for the mechanism's defining operation: releases aggregate or representative signals only when safety, sample size, and anti-identification conditions are met.
Review resolution: Both blind reviewers independently select law_governance as the primary historical origin for the concrete operation—Releases aggregate or representative signals only when safety, sample size, and anti-identification conditions are met. The queued differences concern alternate origin disagreement, origin mode disagreement, domain reach disagreement, encyclopedia synthesis disagreement, not the primary lineage. I retain every alternate that either reviewer explains, without a numeric cap, and choose origin_mode=cross_disciplinary_synthesis because the reviewers' combined evidence identifies material construction from multiple disciplines. domain_reach=universal records later portability rather than multiplying historical origins; confidence=high is the conservative shared evidentiary level, and encyclopedia_synthesis=true preserves either reviewer's affirmative synthesis finding.
Encyclopedia synthesis: The exact catalogued form synthesizes established practice rather than reproducing a single standard historical label.
Review outcome: Reconciled after independent review; high confidence.
Notes¶
[n1] Information escrow — a mechanism (analyzed by Ian Ayres and Cait Unkovic) in which a trusted intermediary holds a report in confidence and releases it only when a pre-set condition is met, such as a matching report from someone else. It is the release-gate logic a threshold rule encodes. ↩