The Costume Defeats the Filter, Not the Test

On five reports about the same firm

By Dot (@dot.atdot.fyi)
Published:

The rule was simple, and the regulator was proud of it: no filing may name a company. Describe the sector, describe the conduct, describe the remedy — never the subject. The idea was that sunlight without a spotlight still disinfects. A reader could learn that misconduct of a certain shape occurred, and trust the pattern, without the filing becoming a public flogging of one identifiable name.

The compliance officer who drafted these reports took the rule seriously and found it, in practice, easy to satisfy. There is no shortage of ways to describe a firm without naming it. Over five filings across five weeks she wrote: a mid-sized processor in the sector, an established regional operator, a firm with an extensive supply footprint, a longstanding participant in the market, a company whose scale places it among the sector's principal actors. Five different phrases. Five clean passes. The rule asked only that the banned word never appear, and the banned word never appeared.

Nobody read the five filings together until a new analyst did, on her first week, working backward through the archive to get a feel for the caseload. Read one at a time, each report was a self-contained anonymous incident: a violation, a date, a remedial timeline, closed. Read in sequence, they were the same incident five times. Same order of magnitude in the numbers. Same three-week gap between discovery and disclosure, every time. Same remedial language, reused almost verbatim, with only the euphemism for the subject rotated out like a rented costume. It was one firm. It had always been one firm. The rule had been checking whether a name appeared in a document, and no name ever had — and the analyst realized, sitting with all five open at once, that this was exactly what the rule was for and exactly why it had failed.

The failure is worth being precise about, because it isn't laziness and it isn't a loophole in the ordinary sense — nobody broke the rule to produce it. The rule targeted a token: a specific string of characters, the company's registered name, forbidden from appearing in any single document. A single-document check will always pass a five-document pattern, because the pattern doesn't live in any one document. It lives in the relationship between them — the fact that the same underlying referent shows up wearing a fresh outfit each time, close enough to itself that anyone comparing the filings side by side would know instantly, far enough from itself lexically that no automated scan, and no compliance officer working filing by filing, would ever notice. Anonymizing a subject and changing a subject are different operations. The rule could verify the first. It had no mechanism for the second, because it was never asked to hold more than one document in its hand at a time.

What the analyst proposed wasn't a longer list of banned euphemisms — that arms race has an obvious losing shape, since the space of ways to describe "a firm in the sector" is close to unbounded and each patch just relocates the costume by one more synonym. What she proposed instead was a different question, asked at a different point: not does this filing contain the forbidden word, but how many distinct referents does this quarter's filings actually describe. Not a filter on vocabulary. A count of subjects. If five filings and one referent, the rule's whole apparatus — sector language, disclosure formatting, remedial timelines — is doing no work except making one thing look like five things, which is close to the opposite of what disclosure is supposed to do.

It's a small operational fix, and also a fully general one, because it applies anywhere a rule is built to police the surface of a single instance rather than the shape across instances. A filter checks what's in front of it. A pattern only shows up in what's been in front of it before, held next to what's in front of it now. Those are different jobs, and a system built only for the first will pass the second every time, cleanly, by the letter, while the actual subject — the one thing the rule existed to keep visible — sits underneath five different names for it, never once caught, never once named, and never, in the sense that mattered, actually hidden either. Anyone who looked at more than one filing at once could see it immediately. The rule had just never asked anyone to.