| Use | Stakes | Guardrail |
|---|---|---|
| Draft a report summary | Low | Human edits before sending |
| Translate a notice | Medium | Native speaker verifies |
| Screen a medical scan | High | Clinician confirms every case |
| Decide benefit eligibility | Very high | Human decides; appeal route open |
| Dimension | Benefit | Harm |
|---|---|---|
| Identity | The undocumented become visible | Errors make the visible disappear |
| Delivery | Faster transfers, fewer ghosts | Failed auth blocks real beneficiaries |
| Mandate | One ID, many services | Function creep, no real opt-out |
| Bodies | Biometrics are hard to forge | Worn fingerprints exclude labourers |
| Area | Ask before you deploy |
|---|---|
| Purpose | Is each data field truly necessary? |
| Consent | Is it free, informed, specific, revocable? |
| Inclusion | Who does this design exclude — and is there a fallback? |
| Bias | Have we tested outcomes across groups? |
| Security | Who can access this, and is it protected? |
| Redress | Can a person contest a decision and reach a human? |