Decision-maker Anonymity¶
Core Idea¶
Decision-maker anonymity is an information-control arrangement in which an individual's contribution to a collective decision remains usable while a specified interested audience cannot reliably attribute that contribution to its human source. The protected object can be the contributor's identity, as when juror names are withheld from parties, or the link between a known contributor and a particular act, as when a known voter's cast choice is not associated with that voter. Anonymity is therefore relative to an audience and an attribution question, not a statement that nobody knows the person or that every part of the process is secret.[1][2][3]
The arrangement has a cross-institutional identity, not one legal rule. In the Fifth Circuit's United States v. Salvatore, the court evaluated a numbered jury whose names were withheld from the parties while questionnaires and voir dire remained available. The U.S. Election Assistance Commission's voting-system guidelines require secrecy of the voter-to-choice link, although voter registration and participation can remain known. These are unlike implementations of the same protected-attribution relation. Single-blind peer review is a qualified contributor case: the author does not know the reviewer who wrote a report, while the editor uses that report to decide publication. The reviewer is not thereby the final publication decision maker.[1][2][3][4]
Concealment may make it harder for an interested party to target or verify a particular contribution. That is a design rationale, not a guarantee that bribery, intimidation, retaliation, or bias disappears. It can also change what an affected party can scrutinize. The tradeoffs and safeguards must be stated for the particular institution.[1][5]
How would you explain it like I'm…
The Mystery Vote Box
Counted but Not Traced
Untraceable Decision Input
Structural Signature¶
Signature: human contributor + individual vote, verdict contribution, or evaluative report + collective decision process that can use the contribution + specified interested audience + an intentionally obstructed person-to-contribution attribution link. The contributor's legal name need not be hidden if the link to the act is protected.
- Contributor and act. Identify who supplies the individual contribution and what counts as that person's act. A juror participates in a verdict, a voter marks a choice, and a reviewer supplies a report used in editorial judgment. If no individual contribution enters a decision process, this Prime has no object.[1][2][4]
- Excluded audience. Ask from whom attribution is withheld. The parties in the cited jury case lack juror names; a would-be vote buyer should not be able to read a compliant voter-to-cast-choice association; the manuscript author lacks the single-blind reviewer's name. A different audience may know other information.[1][2][4]
- Protected link. Specify whether the control hides the person, the act-to-person link, or both. Numbering jurors is unlike preventing a voting system from creating a direct voter–ballot association. Removing a visible name while leaving a cheap and reliable mapping to that name would fail the same audience-relative test.[1][2]
- Continued use. The jury can reach a verdict, the ballot can be counted, and a review can inform an editor even though the interested audience cannot reliably attribute an individual's contribution. Concealment that simply discards the contribution is outside the pattern.[1][2][4]
- Regime-specific custody and safeguards. A court or editor may control identifying information; a ballot system can instead remove a link before decryption. There is no necessary universal custodian retaining a readable identity-to-act record. The need for a judicial showing or a technical unlinking rule is local to the institution.[1][2][4]
The counterfactual is precise: give the excluded audience a cheap, reliable mapping from a particular contribution to its contributor. That audience no longer encounters the attribution barrier, even if a document still omits names.
What It Is Not¶
It is not universal secrecy. In the ballot case, the election system can know voter registration and participation while the cast choice remains unlinked. In the jury case, withholding names from the government and defendants did not deprive them of all juror information; the opinion relied on questionnaires and voir dire. In single-blind review, the editor can know the reviewer although the author does not.[3][1][4]
It is not simply Confidentiality, which governs disclosure by authorized holders, nor Vouched Anonymity, which needs an intermediary attesting to a verified predicate and staking credibility. A secret ballot can remove the readable cast-vote link instead of storing it behind a custodian, and the attribution barrier need not include a voucher. It is also not Blinding in the direction that hides information from the person making the judgment; here the protected flow concerns the judgment contributor's attribution to another audience.
It does not establish that anonymous contributors are impartial, safe, competent, or beyond influence. The cited court treated anonymity as a limited response to a serious safety concern, not an automatic protection or a universal entitlement. The EAC guidelines are voluntary voting-system requirements, not evidence that every election prevents coercion. ACE describes secrecy as a reason to make intimidation or bribery harder to enforce, not a proof that such pressures cannot occur.[1][2][5]
Broad Use¶
The two full cases occupy different institutions and hide different things. A criminal court may withhold juror names from parties when a case-specific risk warrants a numbered jury, while preserving procedures to test impartiality. An election system may prevent association of an identified voter's cast selections with that voter, even though election administration records participation. These share an attribution barrier, but they do not share a legal trigger, a custodian, or a method of review.[1][2][3]
Scholarly peer review shows a neighboring use of the same relation. Under the COPE description of single-blind review, the reviewer knows the author, but the author does not know who wrote the report unless the reviewer signs it. That report helps an editor decide; the reviewer is an evaluative contributor rather than the final publication decider. Open review and author-only blinding change who knows whom and may no longer instantiate this exact contributor-to-author barrier.[4]
The scope therefore reaches collective decision processes with individual human contributions and a specified interested audience. It does not include every anonymous speaker, every private datum, or every decision maker whose name simply happens to be omitted.
Clarity¶
The phrase “anonymous decision maker” tempts one to ask whether a person's name is hidden. The sharper question is: Can this audience reliably link this individual contribution to this person? A known voter can have an untraceable cast choice; a juror's name can be withheld even though the parties learn other facts about that juror. The linked fact, the audience, and the permitted information have to be named before one can say what protection exists.[3][2][1]
This distinction also prevents a false comparison between a court's name restriction and a ballot system's deletion of linkable records. In one setting an institution can keep identifying information under rules. In the other, a readable voter-to-cast-vote link may be prohibited or removed. Calling both “anonymous” without the link specification obscures the design.
Manages Complexity¶
The Prime reduces a varied set of institutional designs to four questions: who contributes, which individual act still counts, which audience seeks attribution, and what makes the person-to-act link unavailable or costly to verify? Once those roles are mapped, local safeguards can be examined without assuming the same operational method everywhere.
For an anonymous jury, the court must consider risk and fair jury selection together. For ballot secrecy, the technical question is whether voting artifacts or metadata can associate a voter with cast selections. For peer review, the policy question includes who can see the reviewer identity and whether the report may be shared. The role map organizes these different checks while preserving their differences.[1][2][4]
Abstract Reasoning¶
Start by naming a contribution rather than a class of people. Then name the audience with an interest in attributing it. Trace every plausible route from act to person: a direct name, a retained key, an ordered record, a questionnaire, or information held by an authorized intermediary. Determine which route the arrangement blocks for the audience and which routes it permits for an institution. If the audience can cheaply reconstruct the mapping, concealment is nominal rather than operative.[1][2]
Next, test whether the act still enters the collective result. A ballot protected by secrecy but not countable would not serve electoral decision making; a reviewer report that the editor never receives does not serve review. Finally, ask what the missing attribution changes for targeting, verification, and scrutiny. Those consequences are hypotheses requiring local evidence, not automatic outputs of the role test.
The strict relation to Information Asymmetry follows from this counterfactual. The contributor knows their own act; an authorized court or editor may know a protected identity; in a compliant ballot design the voter still knows the choice even when a readable institutional link is absent. For an interested audience, the identity-to-contribution fact is material and costly to verify. Remove that knowledge gap and the attribution barrier fails. Information asymmetry also occurs in settings with no anonymous decision contribution, so it is an internal constituent here rather than a synonym or parent genus.
Knowledge Transfer¶
What travels from jury to ballot to peer review is the role skeleton: an individual contribution remains usable, a particular audience lacks reliable attribution, and the missing link can affect that audience's ability to target or scrutinize a contributor. That skeleton helps an analyst find the actual protected fact rather than relying on an institution's “anonymous” label.
The implementation does not travel unchanged. The Fifth Circuit's showing and voir-dire protections do not become ballot-system standards. The EAC's direct-association ban and limited treatment of encrypted uncast ballots do not describe how a court numbers jurors. COPE's single-blind rule does not make reviewers final publication authorities. Transferring the role test is useful; importing another setting's legal rules, security guarantees, or empirical outcomes is not.[1][2][4]
Examples¶
Numbered jurors in United States v. Salvatore¶
The Fifth Circuit reviewed the trial court's use of an anonymous jury in a case involving organized-crime and publicity concerns. Juror names were replaced by numbers and withheld from the government and defendants, while detailed questionnaires and extensive voir dire supplied information for jury selection. The appellate court treated anonymous juries as a limited measure requiring a serious safety basis and safeguards for effective voir dire and the presumption of innocence; it did not find anonymity automatically harmless or universally required.[1]
Mapped back: Each juror is a decision contributor; the juror's contribution can enter the collective verdict. The parties are the specified excluded audience for juror-name attribution. Court-controlled numbering obstructs that link while other selection information remains available. The protective rationale is case-specific; the retained voir-dire route is a court-specific answer to scrutiny costs, not a general solution for every anonymous decision.[1]
Secret ballot under EAC VVSG 2.0¶
The EAC's voluntary voting-system guidelines say the system must not create or store a direct association between a voter and ballot. They also restrict indirect associations involving encrypted selections and require removal before decryption under the specified architecture. Separately, EAC explains that voter history can show participation while the vote choice remains private. The arrangement protects the voter-to-cast-choice relation; it does not hide the voter from election administration.[2][3]
Mapped back: The voter supplies the individual choice, which still contributes to the aggregate result. Other voters, candidates, and would-be coercers are among audiences from whom the cast-choice attribution should not be recoverable from compliant voting artifacts. The protected link is not the voter's name alone but that name joined to a cast selection. There need be no official holding a lasting readable link. This mapping states a technical design requirement, not an empirical claim that every voter is free from pressure.[2][5]
Single-blind peer review — qualified contributor case¶
COPE describes a single-blind model in which reviewers know the authors, but authors do not know which reviewers wrote the reports unless those reviewers sign. The report assists an editor's publication decision. The reviewer fits the evaluative-contribution and audience-relative attribution roles, but the editor, not the reviewer, holds the final publication decision authority. This is a qualified extension of the Prime's title rather than evidence that all anonymous reviewers are final deciders.[4]
Structural Tensions¶
Court-specific protection versus challengeability. Withholding a juror's name can reduce access to a potential target, but criminal defendants still need a meaningful way to assess impartiality. More concealment can make that assessment harder. The Fifth Circuit's opinion requires a serious safety basis and preserves effective voir dire and presumption of innocence; the trial's questionnaires are part of that case's balance. Diagnostic: What juror information can the parties use to test impartiality without revealing names? This tension and remedy are court-specific, not a rule to impose on ballots or journals.[1]
Structural–Framed Character¶
The role relation travels across institutions, but its human and institutional framing is part of its identity. “Contributor,” “decision,” “interested audience,” and “scrutiny” refer to human practices, not arbitrary physical systems. The definition itself does not rank anonymity as good: shielding an individual and preserving accountability can both matter, and the choice of audience or allowable disclosure is locally evaluative. The examples arise in courts, election administration, and scholarly publishing rather than from a formal object independent of institutions.
The portable piece is the audience-relative attribution and knowledge gap; that is recognized in a new decision setting by mapping actual roles. Importing the legal trigger of an anonymous jury or the technical record rule of a ballot into another setting would add foreign assumptions. Its character: mixed-framed. The relation is structurally reusable across institutions, while human decisions, deliberate information controls, and locally judged safeguards remain constitutive.[1][2][4]
Substrate Independence¶
The Prime is independent of a particular institution's artifact: numbered juror lists, voting-system records, and confidential review assignments can all realize its contribution–audience–attribution structure. No one custodian, identifier format, or threat trigger is common to them. This is enough breadth for a Prime rather than a domain-specific court or election procedure.[1][2][4]
The independence has a boundary. The pattern requires people contributing to a collective decision and an audience able to seek attribution. A rotating geometric shape and an unlabeled database field do not become instances merely because some information is hidden. The Prime's abstraction lies in the information-access arrangement within human decision systems, not in removing that human frame.
Relationships to Other Abstractions¶
Current abstraction Decision-maker Anonymity Prime
Parents (1) — more general patterns this builds on
-
Decision-maker Anonymity is part of Information Asymmetry Prime
The arrangement contains a material, costly-to-verify attribution knowledge gap between a contributor or authorized process and the excluded interested audience.Every admitted case deliberately prevents a specified interested audience from reliably verifying which identifiable person supplied an individual decision contribution. The contributor knows their own act, and a court or editor may know a protected link; in ballot secrecy the voter knows their own choice even when no authority retains a readable cast-vote link. The hidden person-to-contribution fact is material to an interested party seeking to target, influence, or scrutinize that contribution, and closing the gap is costly under the access arrangement. This unequal knowledge is an internal constituent of the attribution-control arrangement: if the audience can cheaply and reliably reconstruct the link, the anonymity barrier fails for that audience. Information Asymmetry can exist without anonymous decision contributors, so the nodes are neither synonyms nor a kind-of chain. The parent is inside the child; market exploitation is not asserted as a universal consequence.
Hierarchy path (1) — routes to 1 parentless root
- Decision-maker Anonymity → Information Asymmetry → Asymmetry
Neighborhood in Abstraction Space¶
Decision-maker Anonymity has no computed distinctiveness yet.
Family — Distributed Authority & Coordination (7 primes)
Nearest neighbors
Computed from structural-signature embeddings · 2026-10-08
Not to Be Confused With¶
- Vouched Anonymity: a trusted intermediary verifies a hidden subject's predicate and stakes its credibility for a relying party. No such attestation is required here.
- Confidentiality: a duty controlling disclosure of information held by someone. Some instances here involve custody, while ballot secrecy may remove a readable link.
- Blinding: withholding information from an evaluator to reduce contamination of that evaluator's judgment. This Prime withholds the evaluator's or contributor's attribution from another audience.
- Peer Review: the practice of evaluating work by qualified peers. It can be open, single-blind, or differently blinded; only the relevant attribution arrangement is an instance here.[4]
- Any secret vote or anonymous statement: a case must contain an individual contribution used in a collective decision and a named interested audience unable to reliably attribute it.
Solution Archetypes¶
No catalogued solution archetypes reference this prime yet.
Notes¶
This entry treats “decision maker” broadly enough to include an individual whose contribution enters a collective result. A peer reviewer is only a qualified contributor because an editor makes the final publication decision. The core positive cases are the numbered jury and the secret ballot; they differ in whether the person or the choice link is hidden.
The Fifth Circuit opinion is a case-specific U.S. judicial source. VVSG 2.0 is a voluntary federal voting-system standard, not a survey of all elections. COPE describes review models and editorial control, not measured safety effects. ACE gives the secrecy rationale without proving intimidation or bribery has been eliminated.[1][2][4][5]
References¶
[1] United States Court of Appeals for the Fifth Circuit, United States v. Salvatore, No. 96-30221, revised opinion, Apr. 14, 1997, §III “Anonymous Jury,” printed pp.23–27. Official original opinion. Supports the specific numbered-jury arrangement and that court's safeguards; it is not a universal jury rule or proof of protective effect. registry ↩a ↩b ↩c ↩d ↩e ↩f ↩g ↩h ↩i ↩j ↩k ↩l ↩m ↩n ↩o ↩p ↩q ↩r ↩s ↩t ↩u ↩v
[2] U.S. Election Assistance Commission, Voluntary Voting System Guidelines Version 2.0, Requirements, Feb. 10, 2021, Principle 10 “Ballot Secrecy,” especially 10.2 and 10.2.1-A–F, printed pp.195–199. Official adopted voluntary technical standard; supports the described record controls and exceptions, not a guarantee that all elections prevent coercion. registry ↩a ↩b ↩c ↩d ↩e ↩f ↩g ↩h ↩i ↩j ↩k ↩l ↩m ↩n ↩o ↩p ↩q ↩r ↩s
[3] U.S. Election Assistance Commission, Voter Lists, Registration, Confidentiality, and Voter List Maintenance, official agency explainer, §2 “Voter Roll Confidentiality,” paragraphs on voter-file vote choice and voter history. Distinguishes participation history from vote choice; it does not imply that voter identity is secret. registry ↩a ↩b ↩c ↩d ↩e ↩f
[4] COPE Council, Who owns peer reviews?, discussion document, version 2, Sept. 2017, pp.1–2 “Models of peer review” and pp.4–5 “Editors/publishers” and “Portable peer review.” Full official mirror of the original document; supports the single-blind/open distinction and editor role, not a claim that reviewers decide publication or that anonymity prevents retaliation. registry ↩a ↩b ↩c ↩d ↩e ↩f ↩g ↩h ↩i ↩j ↩k ↩l ↩m ↩n
[5] ACE Electoral Knowledge Network, Vote Secrecy, Electoral Integrity, 3rd ed. (2012), “Vote Secrecy” section. Practitioner guidance for the stated anti-intimidation and anti-bribery rationale, not an original controlled effectiveness study. registry ↩a ↩b ↩c ↩d