Fifty-two documented failures imply a sequence for UK law: make the record exist, bind a forum to it, then build the humane layer — because each stage makes the next one arguable.
This page is the prescription to the map's diagnosis. The corpus behind both is fifty-two real institutional failures — Horizon, the deleted WhatsApps, the carer prosecuted for a debt the state watched grow — each rebuilt as a machine-checked case study. The diagnosis was one line: in forty-three of the fifty-two, the harm ran through a record that was quietly absent, quietly altered, or quietly ignored.
43 of 52 failures ran through a record — absent, altered, or ignored
The prescription is a sequence, and the order matters. Records come first because they are the cheapest reforms to legislate, the hardest to oppose out loud — nobody rises to defend the right not to write things down — and the safest: none of them hands anyone new discretionary power. They remove the discretion to be silent. Then come the forums, because a record only matters if silence about it has consequences. The humane layer comes last not because it matters least, but because every pound and every duty in it becomes arguable the moment the record exists.
One discipline carried over from the corpus: every step below is grounded in the cases that prove it and, where one exists, the real legislative vehicle that could carry it — dated as of early 2026, because statuses move. And one honesty up front: this is a roadmap of process. It does not build a kind state; it builds the floor a kind state can stand on.
First — make the record exist
A statutory duty to record decisions when they are made. English law obliges the state to archive records, not to create them — so a decision destroyed before it is written defeats every safeguard downstream. The WhatsApp case is the proof by failure; the one case in the corpus where the protection fully holds is the proof by success: a record that exists, witnessed, survives its own committee.
proved bygovernment-by-whatsappbreaks · records-rewriteholdsvehicle the Covid Inquiry's recommendations on ministerial messaging; the creation gap in the Public Records Act
A duty of candour with criminal teeth. Infected blood, Grenfell and the maternity cases share one shape: the institution grading its own harm. A duty of candour on public authorities — with personal, criminal consequence for concealment — is the legal form of "the record cannot be quietly absent."
proved byinfected-blood-coverup · grenfell-warnings-ignored · maternity-harm-downgradedvehicle the Hillsborough Law (Public Authority (Accountability) Bill) — promised, introduced, and fought over; its teeth are the thing to watch
A general duty to give reasons for adverse administrative decisions. There is still no general duty in English administrative law to say why — only patches of context. The algorithm that suspends a claim without a reason, the one-word inspection verdict, the citizenship stripped on a basis its subject cannot see: all reduce to this gap.
proved byautomated-welfare-reasons · ofsted-single-word-judgment · citizenship-deprivation-basisvehicle none current — recommended since at least 1988; the oldest unenacted step on this page
Reverse the computer-evidence presumption. Horizon convicted on a presumption that the machine is reliable unless the defendant proves otherwise — a presumption the defendant had no access to rebut. Small, precise, and already consulted on.
proved byhorizon-unauditable-evidencevehicle the Ministry of Justice's 2025 call for evidence on computer evidence, post-Horizon
Publication by default, at the moment of the act. Every slow-walking lever — the missed deadline, the stacked extension, the profiled requester — acts on the request; a record public by default has nothing to request. The VIP lane shows the same fix on spending: each award published as it is signed, with its route.
proved byfoi-slow-walking · procurement-vip-lanevehicle the Procurement Act 2023's transparency duties, in force from 2025 — the principle, generalised beyond procurement
Second — bind a forum to the record
A record only matters if something must answer it. The corpus's middle finding is that the UK's forums are optional in practice: deadlines without consequence, recommendations without follow-up, watchdogs that must wait to be asked.
Deadlines that enforce themselves. The 20-week EHCP limit is breached routinely and costs the breacher nothing; around 95 per cent of appeals succeed, which convicts the refusals — but only for the families who survive the appeal. A missed statutory deadline should carry a default: the request granted, or escalation triggered, automatically.
proved bysend-ehcp-refusals · foi-slow-walkingvehicle SEND reform, long promised and repeatedly deferred; FOI enforcement practice
Recommendations tracked to their fate. Inquiries and internal reviews issue recommendations that vanish between reports; the next death repeats the last. A standing body should hold every recommendation to a public status: implemented, or visibly not.
proved bydwp-death-reviews-secret · grenfell-warnings-ignoredvehicle a House of Lords committee recommended exactly this monitoring body in 2024
An ombudsman that can start by itself. The public-services ombudsman still needs a complaint routed through an MP and cannot open an investigation on its own initiative — which means patterns (a vetting cluster, a mass of unopposed convictions, a forfeiture total) have no forum until individuals fight one case at a time.
proved bypolice-vetting-ignored · single-justice-procedure-opaque · us-civil-asset-forfeiturevehicle the draft Public Service Ombudsman Bill of 2016 — stalled since
Automated-decision safeguards, restored. The exam algorithm and the welfare model show what an unexplainable adverse decision does at scale. The honest headwind: 2025 data legislation loosened these safeguards rather than tightening them. This step swims upstream, and says so.
proved byexam-algorithm-downgrade · automated-welfare-reasonsvehicle restoration of the protections diluted in the 2025 data reforms
Third — the humane layer
This is where "supportive" lives, and it is exactly what no protocol can do — the corpus refuses to pretend otherwise. What the first two stages contribute is that every duty here becomes arguable, costable, and enforceable the moment the record exists.
The state's data used for the person. The DWP held the earnings data while the carer's debt grew, then prosecuted the growth; roughly a third of Pension Credit goes unclaimed by people the state could identify. A duty to act on held data — notify before the debt, auto-award where the entitlement is computable — turns the machinery of enforcement into machinery of prevention. Owed is this page's working sketch of the idea.
proved bycarers-allowance-overpaymentvehicle take-up campaigns exist; the step is making prevention a duty, not a campaign
Remedy at the speed of the harm. A protest is one day; review at legal speed arrives after it. Where the harm outruns the court, the law needs interim remedies that default toward the right being exercised, not the restriction being obeyed.
proved byprotest-conditions-no-basisvehicle no single vehicle — interim-relief practice, said plainly
Advice where the lottery of persistence decides. A right enforced only by appeal selects for the persistent, the represented and the lucky — the corpus calls it rationing by attrition. Legal aid and tribunal capacity are the unglamorous end of this roadmap, and nothing above substitutes for them: no record fixes an unrepresented person.
proved bysend-ehcp-refusals · carers-allowance-overpayment · single-justice-procedure-opaquevehicle none current that matches the scale of the gap
What this roadmap refuses
The corpus's discipline carries over. No step above legislates wisdom or kindness — the sequence makes cruelty and neglect visible, dated and attributable, which is the precondition of a humane state, not its substance. Substance stays where it belongs: with courts, with Parliament, with the people the record finally arms.
And the corpus's three preconditions bind law as much as protocol: the record must be made (stage one fails without candour-backed sanction), a forum must act on it (stage two is institutional, not technical), and someone must be answerable at all. The corpus's eight breaks — the cases where no willing adopter exists, from messages destroyed before any record to a detainer who profits from the detention — are not arguments against the record. They are the strongest argument on this page for legislation with consequence: where nothing consents, only law reaches.
The measure of the sequence. None of these twelve steps is utopian; most are old recommendations with dust on them, and every one is cited to a failure that already happened to real people. Stronger means harder to break quietly. Safer means the person facing power can see what is being done and under which rule. More humane begins where the first two are settled — because a state that must write down what it does, and answer for what it wrote, has taken the first honest step toward being worth trusting.