Cross-border jurisdictional vacuum in social security
Document D — The synthesis
Author: Eric Messa
[[PAGEBREAK]]
[[TOC]]
[[PAGEBREAK]]
This is Document D — The synthesis of the System Audit project. It brings together the patterns that emerge from the material: the paradoxes, the fault lines, and the role of the European Union.
Read it as the conclusion, not as a summary.
[[PAGEBREAK]]
The system isn’t broken. It works exactly as it was designed to. It was designed for people who fit into a single category: living, working and being insured in the same country. Anyone who lives in two countries at the same time doesn’t fit into either of them. And the system doesn’t have a third category. The system hasn’t even considered a third category.
The crux of this issue is not that there are many organisations. The crux is that there is a single mechanism that repeats itself. That mechanism consists of six questions, and the system gives the same answer to each one.
Waar speelt dit?Where does this apply? Anywhere a national rule is applied to a cross-border situation. The rule assumes that a person lives in one country, works in one country and is insured in one country. Anyone who has a presence in two countries at the same time does not fit this assumption. The system does not regard them as an exception requiring a solution. It regards them as an error requiring rejection.
Wat is het probleem?What is the problem? The problem is not that the citizen does not meet the conditions. The problem is that the conditions were not designed for someone who meets the requirements in two countries at the same time. Each country requires you to meet its own conditions. The citizen meets the conditions on both sides, but not in the same country. And so he meets neither of them.
Wie is verantwoordelijk?Who is responsible? No one, and therefore everyone. Each authority is only responsible for its own area. Each authority points the finger at the others. And no authority has the power to compel the others.
Wanneer lost het zich op?When will this be resolved? Once the current procedure has been completed. But the current procedure is stalling precisely because each authority is waiting for another. It’s a vicious circle, and the member of the public is caught in the middle.
Waarom duurt het zo lang?Why does it take so long? Because every level in the system has a good reason not to intervene. No authority, no time, no capacity, no political priority. Each level has its own logic, and these logics reinforce one another rather than correcting one another.
Hoe komt het goed?How will things be sorted out? Through the courts. But the courts resolve individual cases, not the whole system. And the courts are only accessible to those who can afford it.
The facts underpinning these six answers are set out in Document A and Document B. The underlying architecture is described in Document C. Anyone who reads the facts will see the refusals. Anyone who understands the mechanism will see why the refusals are inevitable.
[[PAGEBREAK]]
There are two worlds that never meet: the world of the body and the world of paper.
The world of the body cannot wait. An infection does not wait. An amputation does not wait. Loss of vision does not wait. The body has no waiting list that can be extended by a system. The world of the body knows only one measure: today, yesterday, tomorrow. And the clock never stops.
The world of paperwork works differently. There, a thirty-day deadline applies. There, a twelve-month period applies, which a person must be able to look back on. There, a three-month period for lodging an objection applies. There, a waiting period of one hundred and eighty days applies. There, a waiting period of one hundred and four weeks applies. The world of paperwork has one standard: the system itself. And the system never stops.
There is no bridge between those two worlds. There is a counter. A counter can be closed. A counter can be moved. A counter can be manned by someone who is not authorised. A counter is in no hurry. A counter has no body.
That clash gives rise to five knots that cannot be untangled. The facts relating to those knots are set out in Document A and Document B. The mechanisms are described here.
De eerste knoop: de foutieve registratie.The first link in the chain: incorrect registration. The authority that first establishes a definition — who the citizen is, what right they are applying for, what status they have — records that definition in a shared database. All other authorities consult that database. An incorrect definition automatically propagates throughout the entire system. And no authority further down the chain has the power to compel the source to correct its error. The error begins at a single point of contact, and it never ends.
De tweede knoop: het bewijs dat niet kan worden geleverd.The second sticking point: the evidence that cannot be provided. The system demands a document as proof. This document must be provided by an authority that is not authorised to provide it, or by an authority that refuses to provide it, or by an authority that is unaware that it is required to provide it. The citizen cannot produce the evidence themselves. The body that can produce it is the very body that does not produce it. And the body that needs it is left waiting.
De derde knoop: de drempel die verschuift.The third knot: the shifting threshold. The citizen provides the evidence requested. As soon as the evidence is provided, the threshold shifts. A new condition is added. The old condition was not the real condition; the new condition is the real condition. The citizen provides the new evidence. The threshold shifts once more. The citizen is never ‘done’, because ‘done’ is not a category within the system.
De vierde knoop: het systeem dat zichzelf blokkeert.The fourth sticking point: the system that blocks itself. The body responsible for correcting the error is the very same body that made it. And that body has no internal procedure for correcting its own errors. If you ask for a correction, the authority asks for the form that it itself is required to issue. And the authority refuses to issue the form, because no decision has yet been made regarding the entitlement. The circle is complete. The authority is both the gate and the gatekeeper.
De vijfde knoop: het systeem dat de schade meet maar niet de oorzaak.The fifth issue: the system that measures the damage but not the cause. The system measures what someone used to earn. It measures what someone, according to their tax history, ought to be able to earn. But it does not measure what someone actually receives today. When a benefit is suspended, actual income falls to zero. The system does not record this drop. The system continues to base its calculations on the old income. The family lives below the poverty line, but is recorded by the system as not being in poverty. Poverty is created by the administration and denied by that same administration.
De blinde vlek.The blind spot. Most people don’t see this. Those who never cross the border don’t realise the doors are closed. Anyone living in the centre of the country has never knocked on either door. The system works for them. The system is invisible and comfortable. That is not proof that the system works. It is proof that the system works for a certain type of person.
This blind spot is not just a national problem. It also exists between regions within a single country. The same mechanisms at play between two countries are also at play between two regions, between two cantons, between two federal states. The failure becomes apparent as soon as you cross a border — whether it is a national border or a regional one. And those who do not cross the border do not see it. That is not an excuse, but a structural reality.
De verwarring tussen reisvrijheid en lidmaatschap.The confusion between freedom of movement and membership. There is another aspect to this blind spot: the confusion between two different things that people tend to mix up. The right to travel freely between countries is different from the right to work in a country and accrue social rights there. A country can be a member of the European Union without you being able to travel freely there. A country can use the euro without being a member of the European Union. The categories used by politicians — membership of the European Union, freedom of movement, membership of the eurozone — do not correspond to the lived reality of someone crossing the border.
[[PAGEBREAK]]
The system has four layers. Each layer has its own logic. And these logics reinforce one another rather than correcting one another.
De uitvoerende laag: de logica van de regel.The operational level: the logic of the rules. These are the service centres, the health insurance funds and the benefits agencies. They apply the rules. The rules are national. The rules are based on the assumption that a person lives in one country, works in one country and is insured in one country. Anyone who does not fit this assumption triggers an error. The error is not seen as a sign that the rule needs to be amended. The error is seen as proof that the citizen does not meet the requirements. The executive level has no authority to change the rule. It only has the authority to apply the rule. And the rule is what it is.
De toezichthoudende laag: de logica van de zelfbeperking.The supervisory layer: the logic of self-restraint. These are the regulators, the inspectorates and the ombudsman services. They spot the error. But they have a good reason not to intervene. A regulator who stretches the limits of their authority risks having their decision challenged. The safest position is always the narrowest interpretation of one’s own authority. So the regulator does not intervene. Not because they do not want to, but because they do not dare to. And their fear is rational: the system rewards self-restraint and punishes boldness.
De democratische laag: de logica van de tijdschaal.The democratic layer: the logic of the timescale. This comprises Parliament, the Ombudsman and the committees. They receive the complaint. But they operate on a timescale that is incompatible with the urgency of the crisis. A committee debate takes months. A legislative amendment takes years. A medical crisis lasts days. The democratic layer can change the law, but it will not do so unless there is political pressure. And there is no political pressure for a problem that affects only cross-border workers. The timescale of democracy and the timescale of the body are fundamentally incompatible.
De symbolische laag: de logica van de onmacht.The symbolic level: the logic of powerlessness. This is the Head of State. He receives the petition. He acknowledges receipt. He forwards it to the relevant minister. That is where the intervention ends. The symbolic level has no executive power. It is the final stop.
De cirkel.The circle. Each layer has a reason not to intervene. The executive layer applies the rules, but the rules were not designed for this situation. The supervisory layer sees the error, but is not permitted to intervene. The democratic level can change the law, but does not do so as long as there is no political pressure. The symbolic level has no power. And the only one left is the judge. But the judge resolves a single case, not the whole system. And the judge is only accessible to those who can afford it.
The system isn’t broken. It works exactly as it was designed to. It was designed for people who fit within the lines. Anyone who falls outside the lines falls between the lines. And there’s no safety net between the lines. That’s not a fault. That’s the design.
De rode draad door alle lagen.The common thread running through all levels. The same thing happens at every level. An authority identifies a problem. The authority determines that the problem does not fall within its remit. The authority refers the matter to another authority. The other authority does the same. And the citizen is expected to act as the link between all these authorities. The citizen is the only actor in the system who has no authority to make decisions, yet is the only one responsible for keeping the whole system running.
The facts relating to this mechanism are set out in Document A and Document B. These documents specify which body made which mistake, which letter was sent and when, and which decision was taken and when. This section merely outlines the pattern.
[[PAGEBREAK]]
European integration is based on the removal of physical borders. In 1944, Belgium, the Netherlands and Luxembourg signed a customs union. In 1951, the European Coal and Steel Community was established. This was followed in 1957 by the European Economic Community. In 1985, the Schengen Agreement was signed, which provided for the abolition of internal borders. The aim was the free movement of people, goods, services and capital.
In the physical world, that objective has been achieved. The border posts have been dismantled. Movement across national borders takes place without checks. A citizen can drive from the Netherlands to Belgium, from Belgium to France, and from France to Germany, without stopping. It took forty years to achieve this openness, from 1944 to 1985. After that, it was a reality.
The administrative reality has remained asymmetrical. Whilst the boundaries for the human body have disappeared, national administrative systems have never been merged or standardised. Each country retains its own health insurance fund, its own tax authority, its own benefits agency and its own disability register.
This is where the fundamental flaw lies. The European legislator has opened up the physical space, but the national executive has programmed the underlying computer systems exclusively at national level. The infrastructure — the motorway — is transnational. The administrative decision-making point — the counter — has remained strictly national.
The legislative amendment to address this decoupling is subject to a structural delay. In April 2026, a provisional political agreement was reached via a trilogue on the revision of Regulation 883/2004, the legislation that coordinates social security between Member States. In July 2026, the revised text was formally adopted. However, the actual operational implementation — including the transfer of responsibility for unemployment benefits to the country of employment after a continuous period of 22 weeks — is not scheduled until 2030 or 2031 due to the necessary IT adjustments.
The entire legislative cycle, from the initial proposal to entry into force, thus spans more than ten years of negotiations and four years of waiting for implementation. Fourteen years for a software update.
The digital solutions in this reform package are also stalling at the threshold of the data silo. The introduction of the European Social Security Pass, linked to the European digital identity wallet, digitises the medium on which the documents are stored. It enables public authorities to verify the documents quickly, but it does not enforce an automatic flow of data between national systems. It does not actively retrieve the data from the source. The front door is being digitised, but the back door remains closed.
The European Commission’s macroeconomic projections forecast savings and fraud prevention totalling six billion euros by 2040. This calculation ignores the microeconomic reality of the intervening fourteen years. During this latency period, the costs of the system’s failure are passed on in full to the public: the private bank that parks debts subject to heavy penalties, the energy supplier that engages debt collection agencies and demands unfeasible medical examinations, and the private medical assessment market that charges unachievable rates for remote consultations. All these costs are borne by the individual, whilst the cause of the system’s standstill lies with the government.
The Benelux was once the testing ground for European integration. In 1944, the experiment that would later be replicated on a European scale was launched here. The three countries have demonstrated that open pathways are possible. They have not demonstrated that open systems are possible.
The ‘border worker’ is the error message indicating a half-finished design. The physical architecture is complete. The administrative architecture is not.
[[PAGEBREAK]]
The problem is not unique to this case. Here is an overview of the scale at European level.
In the European Union, millions of people live in a country other than the one where they work or where they come from. This number is growing steadily as a result of the European Union’s policies on labour mobility, the expansion of remote working and demographic trends in border regions.
The number of complaints received by the informal European mediation network is increasing by tens of per cent each year. The problem is getting bigger, not smaller.
[[PAGEBREAK]]
The problem is not specific to Belgium and the Netherlands. It is a European one. Four case studies demonstrate this. These case studies are drawn from public European policy literature and academic research. They do not appear in Document A or Document B, as those documents describe a single individual case. They are included here because they demonstrate that the mechanism evident in that single case is repeated in every European border region.
Luxemburg.Luxembourg. Luxembourg has the highest proportion of cross-border workers in the EU. The coordination of their social security is governed by the European Regulation, but the tax and social security thresholds for remote working are fundamentally out of step with one another. A worker who works from home within the range of these two thresholds finds themselves in a legal grey area. Two countries levy taxes on the same basis, but using incompatible threshold calculations. This has required years of ad hoc bilateral agreements before any stabilisation could be achieved — and only in relation to taxation, not social security.
De Øresundregio.The Øresund region. In the region around the Øresund, thousands of cross-border workers commute across the border every day. They are covered by social security in their country of employment but receive unemployment benefits from their country of residence. Coordination requires the employer to provide a notice of termination document that the foreign unemployment fund recognises as valid. In practice, this exchange is slow, the documents are not always in a machine-readable format, and in the meantime, the individual is left waiting without benefits. The region has a joint committee that monitors the flow of information, but this committee has no authority over the implementing bodies in either country.
Zwitserland/Frankrijk.Switzerland/France. Switzerland is home to an estimated hundred thousand cross-border workers from France. Teleworking has given rise to a fundamental tension: the tax threshold for teleworking and the social security threshold for teleworking are diverging. Anyone working from home who falls between these two thresholds pays tax in one country but may be subject to social security contributions in the other. This requires simultaneous affiliation to two schemes, which the European regulation explicitly prohibits. The solution required a transitional agreement, an extension and a formal amendment to the treaty, with daily reporting obligations for employers. The administrative burden has shifted from the state to the employer; the structural incompatibility has not been resolved.
De Oostenrijks-Oost-Europese corridor.The Austria–Eastern Europe corridor. In the corridor between Austria and Eastern European Member States, the large-scale posting of workers is an established economic reality. Certificates confirming the country in which a posted worker is covered by social security are widely used fraudulently to maintain low social security contributions in the sending country, whilst the worker is in fact working permanently in the host country. The Court of Justice has ruled that even where a certificate has clearly been obtained fraudulently, the host Member State may not unilaterally apply its own legislation before engaging in dialogue with the issuing Member State. This requirement for dialogue, intended to protect the worker, is in practice exploited by fraudulent employers to delay the application of the host country’s legislation for months, whilst the worker remains formally unprotected.
The conclusion drawn from all four case studies is the same: even in Europe’s most densely populated cross-border worker regions, there is no integrated solution. National emergency agreements are the only way forward, in the absence of structural reforms.
[[PAGEBREAK]]
The European regulation coordinating social security between Member States determines which country is the competent Member State. The regulation designates a single country as responsible — usually the country of employment — but does not provide for an automatic safety net for periods in which the allocation is disputed, changes temporarily, or both countries refuse to accept primary responsibility.
The ‘both/and’ paradox — whereby a citizen is formally part of the systems of two countries but is regarded by both as the responsibility of the other — is not resolved by the regulation, but merely described.
The mediation network acts as a non-binding oversight mechanism. It records some of the complaints and produces a finding, but the finding has no legal consequences for the body that refuses to comply. A recommendation is just a recommendation. The implementing body that disregards it faces no consequences. The European Social Security Information Exchange System exists for the electronic exchange of information, but response times for requests from other countries are not enforceable. Both instruments are procedural measures designed to address a problem that should have been resolved at a structural level.
The facts relating to this architectural flaw are set out in Document B. That document specifies which regulations contain which provisions, which court rulings provide which interpretations, and which bodies have which powers. This document merely outlines the pattern.
[[PAGEBREAK]]
In principle, cross-border citizens with a chronic condition or recognised disability have two options for managing their finances.
De uitkeringsroute.The benefit route. Disability benefit via the competent country. This route creates dependence on the state and is subject to national political goodwill. The average disability benefit in the EU ranges from 800 to 1,800 euros per month, payable for life in the event of permanent incapacity for work. The barrier to access: waiting periods are not recognised across borders; procedures require a national assessment history; the European exchange system is slow.
De fiscale autonomieroute.The fiscal autonomy route. Allowances, increased benefits and tax reductions in the country of residence based on a recognised disability. This route costs the state less, promotes economic participation and preserves citizens’ autonomy. The barrier to access is the same: medical status is not recognised across borders, one country’s administrative category does not translate to another, and the systems that are supposed to activate these entitlements do not communicate with one another.
The fiscal autonomy route is more favourable than the benefit route in most policy areas: it costs the state less, promotes economic participation, preserves citizens’ autonomy and is in line with the EU’s labour mobility objectives. Nevertheless, it remains just as inaccessible as the benefit route as long as there is no cross-border translation of medical status and no administrative recognition of status. The barrier is not financial but structural.
However, there is one aspect that puts the earlier analysis into perspective: in this case, the route to tax autonomy in Belgium via a manual bypass has, in fact, proved feasible. A medical certificate issued directly by the GP and submitted with the BNI tax return – bypassing the KSZ and the DG HAN – triggers the increased tax-free allowance and, upon submission of the return, results in a calculated balance of €2,669.97 in the family’s favour (pending the final tax assessment). The same route remained completely blocked via the automated government systems (8 versus 9 points at DG HAN, RIV blockage in the Netherlands). The distinction is instructive: the tax route is not impossible, but the citizen and their GP must manually bypass the digital government chain to make it work. And this has a paradoxical side effect: a higher net family income may actually jeopardise the means-tested allowances from Parentia and the SVB, as the automatic recalculation is based on the notional earning capacity.
In addition, there is a factor that is often overlooked when comparing the two approaches: the political economy of funding. The European Union does not have its own social security system. Social security is a national competence. What the EU does, however, is co-fund programmes through the European Social Fund Plus that focus on labour market integration and social inclusion. These funds do not go towards the benefits themselves, but towards the support services surrounding them: training, guidance into work, and projects that increase social participation.
Benefits in the European Union are largely financed through contributions: on average, 64 per cent of unemployment benefits come from social security contributions, not from taxes. Tax benefits, such as tax relief for people with disabilities, on the other hand, are funded almost entirely from national general revenue. The EU has no mechanism for co-financing Member States’ tax expenditure.
This creates a funding asymmetry. For benefit-related programmes, a Member State can apply for EU co-funding. This is not the case for tax incentives. Member States therefore have a greater financial incentive to strengthen the benefits route than the tax route, regardless of which route is more favourable to the citizen.
The tax-based approach costs the state less, but the state does not receive any European co-funding for it. The benefit-based approach costs the state more, but part of the associated costs can be covered by European funds. The political economy of the funding thus influences the policy choice, regardless of which route is most effective for the citizen.
[[PAGEBREAK]]
Three specific building blocks directly correct the architectural flaws. They can be implemented individually, but are most effective when used in combination.
Bouwsteen 1 — Het inschrijvingsmoment als synchronisatiepunt.Building block 1 — The registration moment as a synchronisation point. When an EU citizen officially deregisters in country A and registers in country B, this triggers a single authorised digital import of the relevant administrative data: employment history, recognised medical conditions, current entitlements and family circumstances. The technical infrastructure is in place: the European digital identification system provides the foundation, the national population registers act as the trigger points, and the European social security exchange system provides the capacity. What is missing is the political decision that the registration process is the legal trigger for this synchronisation, and the obligation on the sending country to supply the data within a specified timeframe.
Bouwsteen 2 — Het Europees Medisch Statusdocument.Building block 2 — The European Medical Status Document. A standardised digital document that makes a citizen’s functional status readable across borders. It does not record the diagnosis — the illness — but the functional limitation: what the person can and cannot do, what percentage of work disability has been recognised, which country has formally established this recognition, and on what date. It is based on the World Health Organisation’s International Classification of Functioning, Disability and Health, which provides a universal linguistic framework already used by 29 European countries in rehabilitation medicine and health statistics. Each national authority publishes a conversion table: a published mapping of international scores to its own administrative categories. When a citizen submits an application to a foreign authority with a status document, the system automatically converts their score to the national category. The citizen is assessed once. The conversion is automatic. No re-assessment is required unless the medical status changes.
Bouwsteen 3 — De automatische fiscale route-activering.Building block 3 — Automatic tax route activation. When the status document records a recognised restriction and the registration document confirms the citizen’s cross-border situation, the system automatically activates the tax instruments available in the country of residence. This is not done via a manual application, but via an automatic decision rule based on readable status data. The decision logic works as follows: the score plus the registration status are compared with a nationally published activation table. In the Netherlands, this automatically triggers: an adjustment to the assessed income for benefit calculations, an increased allowance for recognised disability, and a calculation of entitlement to healthcare allowance, housing benefit and the child-related budget based on the adjusted income, including foreign components. In Belgium, this automatically triggers: the tax deduction for people with a disability, the increased minimum subsistence level in the event of recognised incapacity for work, and a notification to the relevant authority that the citizen may be entitled to supplementary allowances.
[[PAGEBREAK]]
The implementation of an interconnected system raises questions regarding fraud resistance. An analysis shows that the current system of unconnected silos does not prevent fraud, but merely makes it more difficult to detect. Double payments in two countries are technically possible today because country A does not know what country B is granting, and vice versa. The European exchange system is intended to address this, but its use is not enforced. An interconnected system with readable status data is more difficult to exploit than a system of silos, for three specific reasons.
Firstly: an international status document is based on scores derived from validated medical assessments carried out by recognised bodies. Falsifying a score requires the active cooperation of an assessing body, which shifts the burden of fraud from the individual to the institution — thereby making it detectable and punishable.
Secondly, registration details are linked to official population registers and cannot be altered by the individual themselves; a false registration requires the active cooperation of the registering local authority.
Thirdly: the automatic tax activation process compares status data with the home country’s activation table; every activation is logged and can be viewed by both countries, meaning that duplicate activations can be detected immediately.
A transparent, interconnected system is structurally more resistant to fraud than a system comprising unconnected national silos. Simplification for the public and protection against abuse are not mutually exclusive — they reinforce one another.
[[PAGEBREAK]]
In practice, cross-border citizens who encounter problems with the coordination of social security have two options: the legal route and the structural route.
De juridische weg — individueel, traag, zonder systeemeffect.The legal route — individual, slow, with no systemic impact. The informal mediation network reaches several thousand citizens each year. National court proceedings take 12 to 36 months. Preliminary ruling proceedings before the Court of Justice take 16 to 22 months. Each judgment applies to a single individual citizen. The system does not change for the millions of other cross-border citizens who face the same problem but do not bring proceedings.
De structurele weg — collectief, eenmalig, universeel.The structural approach — collective, one-off, universal. A targeted amendment to the European Coordination Regulation will apply to all cross-border workers from the date it comes into force. Once introduced, an international status document will permanently and automatically eliminate the need for re-assessment for every new citizen who moves across borders. Automatic tax route activation applies to every citizen who holds a status document and is registered in a country of residence, without them needing to be aware of, claim or document their entitlement.
A European legislative process to amend the Coordination Regulation takes, on average, four to six years. If a reform package comes into force in 2030, it will reach more citizens in its first full year than the legal route has in thirty years. And every year thereafter, automatically, for every new citizen who crosses the border.
The legal route resolves issues on an individual basis and does not bring about any structural change. The structural route changes the system for everyone at the same time. Every year of delay in the structural route deprives tens of thousands of citizens of access to rights they are already legally entitled to.
[[PAGEBREAK]]
It is an objective fact that a medical recovery process is incompatible with conducting multiple institutional procedures. The fact that a citizen undergoing physical recovery is required to gather this evidence demonstrates the priorities of the current system. Many abandon these procedures prematurely when faced with the scale of the administrative obstacles.
The initial instinct is always to resolve one’s own, individual problem. However, when the timelines were systematically logged, a structural pattern emerged that goes beyond the individual case. This mechanism affects everyone who falls outside the standard norm. For those who live within the norm, the system operates invisibly and seamlessly. This does not prove that the system works universally; it proves that it has been optimised for a specific, national profile.
The dismantling of these procedures lays bare the underlying architecture. The institutions and networks established for protection operate procedures that are disconnected from the material consequences. Control mechanisms operate on the basis of the system’s parameters, not on the basis of the reality of remedy. Abstract conditions are managed. At the same time, the number of situations that transcend the binary categories of legislation is growing. The norm is static, whilst social reality is dynamic.
This dossier has been compiled as a concrete set of data illustrating what is structurally stagnating. As a Franco-Italian by origin, born in Belgium and living in the Netherlands, the theory of a unified European space has always been a starting point for me. Practice shows that this theory is conditional and applies mainly to those who fit exactly within the national mould. Those who fall outside it come up against the limits of that model.
This report serves as an objective record for anyone who finds themselves in a similar situation, and as factual evidence for the authorities responsible for reviewing the system architecture.
The standard doesn’t change. I do.
↑