Tiered Compliance Rule¶
Institution — instantiates Mandatory / Default Rule Design
Varies normative force or implementation duties by risk, scale, capability, or affected population.
One uniform rule is over-strict for the low-risk case and under-strict for the high-risk one. The Tiered Compliance Rule resolves that by stratifying a single regime into tiers, assigning heavier duties to higher-risk or higher-capacity actors and lighter ones below, all under a common protected interest. Its defining move is that force is a function of an observable classifying variable — risk, scale, capability, affected population — rather than a single level applied to everyone. It is a standing institution, not a one-time selection among rule forms: it builds the graduated structure and the criteria that sort actors into it. It exists for exactly the case the archetype flags, where a universal form would be simultaneously underprotective at the top and excessive at the bottom, and where the observable differences among the regulated are large enough to justify treating them differently.
Example¶
A national regulator governs software systems that make consequential decisions about people. A single rule would be absurd: the same obligations cannot sensibly apply to a spam filter and to a system that screens job applicants or sets bail recommendations. So the regime is a Tiered Compliance Rule. Systems are sorted by risk to affected people into tiers — minimal, limited, high, and prohibited. Minimal-risk systems carry only light transparency duties; high-risk systems (hiring, credit, essential services) carry a mandatory floor of testing, documentation, human oversight, and audit; a top tier of unacceptable uses is banned outright. The tiers are defined by observable use-and-impact criteria, not self-declared labels, precisely so a vendor cannot dodge the high-risk floor by relabeling its product. The regime maps who sits in each tier and who is protected by it — the applicants, borrowers, and defendants downstream — and it watches for actors gaming their classification to fall a tier. The result concentrates the heavy obligations where nonconsensual harm is serious while sparing low-stakes tools from duties that would only smother them.
How it works¶
- Choose an observable classifying variable. Sort actors by risk, scale, capability, or affected population using criteria that can be measured from the outside, not self-asserted.
- Assign graduated force per tier. Bind a strong floor where stakes are high, lighter duties or defaults where they are low — different obligations, one protected interest.
- Harden the tier boundaries against gaming. Design criteria so actors cannot cheaply down-classify to escape their real obligations, and smooth cliff effects at the thresholds.
- Map the distribution. Track which actors and which protected populations fall in each tier, so the stratification protects the right people and does not concentrate burden or exposure unfairly.
Tuning parameters¶
- Number of tiers — few broad bands versus many fine ones. More tiers fit heterogeneity better but multiply classification disputes and gaming surface; fewer are simpler but blunter.
- Classifying variable — risk, revenue, headcount, user count, capability. The choice determines who lands where; a proxy that is easy to measure may be easy to game.
- Threshold placement — where the cut-offs sit. Thresholds create cliff effects — a small change in the variable can trigger a large jump in duty — which invites bunching just below a line.
- Boundary rigidity — bright-line cut-offs versus a graduated ramp. Bright lines are predictable but produce cliffs; ramps smooth incentives but complicate compliance.
- Reclassification cadence — how often actors are re-sorted as they grow or change risk. Frequent re-sorting keeps tiers accurate but adds administrative churn.
When it helps, and when it misleads¶
Its strength is proportionate fit: it puts the heavy obligations where serious nonconsensual harm lives and lifts them off the low-stakes cases a blanket rule would needlessly burden — the logic of risk-based regulation, which calibrates regulatory intensity to the hazard an activity poses.[n1] It is the right tool when observable risk differences are large and a single form would misfire at both ends.
Its failure mode is that complex tiering invites gaming, cliff effects, and unequal enforcement: actors bunch just below a threshold, split themselves to stay in a lower tier, or exploit vague criteria, while a sharp cut-off punishes a marginal actor far more than one just inside the line. A classic misuse is tiering on a variable that is easy to manipulate (a self-reported label, a re-organizable corporate structure) so the high-risk floor is escapable by paperwork. The guarding discipline is to anchor tiers to observable, hard-to-game criteria, smooth the cliffs, and monitor the distribution of both compliance and enforcement across tiers so the structure does not quietly reward evasion.
How it implements the components¶
mandatory_floor— it binds a genuine nonwaivable floor in the higher-risk tiers, concentrating strong obligations where serious harm is possible.authority_and_scope_record— the tier definitions and classifying criteria are the scope record: they fix who is governed at what intensity and under what authority.rights_burden_and_dependency_map— it maps which actors and protected populations fall in each tier, guarding against a stratification that concentrates burden or leaves someone exposed.
It builds a standing graduated structure; it does not perform the up-front selection among advisory, default, and mandate for a single rule — that rule_type_decision_matrix is the Mandatory / Default Decision Matrix — and it does not itself run the method-equivalence least_restrictive_alternative_record of Mandatory Floor with Safe Harbor.
Related¶
- Instantiates: Mandatory / Default Rule Design — the institution that varies force by observable risk and capacity under one protected interest.
- Consumes: Mandatory / Default Decision Matrix — the selection of force per tier draws on the matrix's condition-scoring.
- Sibling mechanisms: Appeal and Waiver Process · Default Enrollment with Notice · Exception Review Protocol · Mandatory / Default Decision Matrix · Mandatory Floor with Safe Harbor · Opt-Out Architecture · Pilot and Reversibility Test · Sunset Clause and Periodic Review · Least-Restrictive Alternative Screen
Editorial Notes¶
Form Classification¶
Form family: Rule, Policy & Commitment
Rationale: Tiered Compliance Rule operates as a standing rule, threshold, contractual commitment, or policy constraint governing future conduct because it varies normative force or implementation duties by risk, scale, capability, or affected population.
Independent corroboration: The frozen evidence defines Tiered Compliance Rule as 'Varies normative force or implementation duties by risk, scale, capability, or affected population', so its operative form is Rule, Policy & Commitment.
Review outcome: Independent reviewer agreement; high confidence.
Origin Attribution¶
Primary origin: Law & Governance
Origin pattern: Cross-disciplinary synthesis
Present-day reach: Universal
Rationale: Tiered compliance rule derives most directly from law and governance's rule, authority, accountability, and due-process tradition; its defining operation is to varies normative force or implementation duties by risk, scale, capability, or affected population.
Related originating lineages:
- Public Administration & Policy — Public administration's program, regulatory, and service-governance tradition provides a formative adjacent lineage for the same tiered compliance rule operation.
Review resolution: Both blind reviewers independently select law_governance as the primary historical origin for the concrete operation—Varies normative force or implementation duties by risk, scale, capability, or affected population. The queued differences concern origin mode disagreement, encyclopedia synthesis disagreement, not the primary lineage. I retain every alternate that either reviewer explains, without a numeric cap, and choose origin_mode=cross_disciplinary_synthesis because the reviewers' combined evidence identifies material construction from multiple disciplines. domain_reach=universal records later portability rather than multiplying historical origins; confidence=high is the conservative shared evidentiary level, and encyclopedia_synthesis=true preserves either reviewer's affirmative synthesis finding.
Encyclopedia synthesis: The exact catalogued form synthesizes established practice rather than reproducing a single standard historical label.
Review outcome: Reconciled after independent review; high confidence.
Notes¶
[n1] Risk-based regulation allocates regulatory attention and obligation in proportion to the risk an actor or activity poses, rather than uniformly. Tiered technology regimes that sort systems into risk categories — from minimal-risk tools to high-risk and prohibited uses — are a prominent contemporary instance of the approach. ↩