Correction-Channel Integrity
Human correction must still causally change a system's future behavior before irreversible damage.
What decision changes?
Before granting more autonomy, ask whether legitimate correction reaches the system with enough speed, bandwidth, independence, and effect.
Feedback is not enough. A dashboard can receive feedback while the real deployed actor ignores it. A model can say it accepted a correction while the future behavior remains unchanged.
Correction-channel integrity asks for a causal path. A legitimate correcting process observes, judges, issues a correction, controls some handle, and that handle reaches the system’s future behavior in time.
This turns “is the system corrigible?” into a more concrete audit question: which handles exist, who controls them, what do they reach, how fast do they act, and what evidence shows the system changed rather than performed agreement?
The central warning is correction theater. If correction is only ritual, it may make a deployment look safer while consuming the scarce time in which real correction was still possible.
What would count as evidence?
Evidence would include correction traces showing pre/post behavior change, latency, who controlled the handle, and where correction was ignored or merely acknowledged.