Lesson 8.3Lesson 8.3 · Building & Governing the Rules
Who Is Accountable
When an automated check misses a real problem or wrongly flags a compliant design, several parties had a hand in it - the designer, the authority, the rule-encoder, the vendor - so the question of who is responsible must be answered deliberately, and the answer must keep accountability with humans and the authoritative law
The check missed it. Whose fault is that - the designer who trusted the tick, the encoder who mis-read the clause, the vendor who shipped it, or the authority who approved? The dangerous answer is 'the software'.
Picture the moment a problem surfaces. A building is complete, or nearly so, and something is wrong: an escape route that is too long, a setback encroached, an accessibility provision missing. It went through an automated compliance check, and the check reported a pass. Now trace the hands the result passed through. A vendor built the checking engine. Someone encoded the rule - perhaps mis-reading the clause, perhaps holding a stale version. The designer supplied the model and, seeing a green tick, moved on. The approving authority granted permission. Each did part of the work; each could point at another. In the gap between them, responsibility can seem to evaporate - and the most tempting place to let it settle is on the tool, which cannot be sued, struck off or asked to explain itself.
That temptation is the whole danger of this lesson. When a system distributes a task across many actors and a machine, it creates what is often called an accountability gap: everyone contributed, no one is clearly answerable, and the automation becomes a convenient place to park the blame. In safety-relevant work like building compliance, that is unacceptable. A check that mis-flags a compliant design wastes money and trust; a check that misses a real violation can end in an unsafe building. Someone must be answerable for whether the design actually complies - and it cannot be a piece of software. This lesson is about facing the question squarely: naming the parties, resisting the drift of responsibility onto the tool, and holding firm to the principle that accountability stays with the humans and the authoritative law, with the automated check as an assistant that never inherits their duty.
Vendor + encoder + designer + authority + a machine = accountability gap. Tool cannot hold a duty. Bounded duties (honest tool, faithful encoding) vs BINDING duties (does it comply? is it approved?) = designer of record + authority, against the law.
Why responsibility seems to dissolve when a machine is in the loop
The first thing to understand is why automated compliance makes the question of responsibility genuinely hard, rather than just uncomfortable. Manual checking, for all its faults, keeps responsibility legible: a professional certifies the design and a plans-examiner approves it, and if something is missed you know whose reading it was. Insert an automated check into the workflow and the task is now shared among several actors and a machine, and each can plausibly say the failure was not theirs.
Walk the chain. The vendor can say the engine ran exactly as designed - it applied the rules it was given and reported correctly. The rule-encoder can say they encoded the clause as they read it, or that the version was current when they wrote it. The designer can say the tool passed the design, so they reasonably relied on it. The approving authority can say it is entitled to consider a recognised checking result as part of its process. Every statement is partly true, and yet the design was non-compliant and no one is squarely answerable. This is the accountability gap: a diffusion of responsibility that appears whenever a decision is distributed across many hands and a system, and it is well known in the study of automation and complex organisations.
What makes it worse in compliance is the presence of the machine itself as a tempting sink for blame. A tool feels neutral and authoritative; when it is in the loop, humans are prone to treat its output as the decision rather than as input to their decision - automation bias again - and then, when it fails, to speak as if 'the system got it wrong', as though that ended the matter. But a tool cannot hold a duty. It cannot be professionally accountable, cannot be sanctioned, cannot owe anyone a standard of care, cannot explain its judgement to an inquiry. Letting responsibility settle on it is not an answer; it is the absence of one. So the accountability gap is not a technicality to be waved away - it is the central governance risk of putting automation into a safety-relevant decision, and closing it requires a deliberate answer to the question the tool cannot answer for itself: which human is responsible, for what?
Who had a hand in it - and what each is answerable for
Closing the gap starts with naming the parties honestly and separating what each can legitimately be answerable for, because the answer is not that one person is to blame for everything - it is that different actors owe different, real duties, and the tool owes none of the binding ones.
The vendor who builds the checking engine is answerable for the tool working as described: running the encoded rules faithfully, reporting passes, fails and unknowns honestly, being transparent about scope, and not overclaiming - not marketing a check as 'automatic compliance' or an approval. The rule-encoder is answerable for the fidelity of the encoding to the source clause: making interpretive choices defensibly and visibly, keeping the rule traceable to the law, and versioning it. These are real responsibilities, and doing them badly is a genuine failing - but note what neither the vendor nor the encoder is answerable for: whether a particular design actually complies. They never saw the project; they cannot certify it. The designer of record is answerable for exactly that - for the design meeting the regulations, for the truth and completeness of the model data fed to the check, for exercising professional judgement over the tool's output rather than deferring to it, and for the rules the tool never checked. The approving authority is answerable for the determination of compliance and the grant of permission, made against the actual law; a checking result may inform its process but does not replace its judgement or its responsibility.
Seen this way, the gap closes not by blaming one party but by holding each to its own duty - and by recognising that the two binding duties, whether the design complies and whether it is approved, sit squarely with the designer of record and the authority, exactly where they sat before automation arrived. The tool and its makers carry real but bounded responsibilities for the quality and honesty of the instrument; they do not carry the duty to get this building right. Keeping those distinct is what stops the automation from becoming a place where the binding responsibilities quietly disappear. In India, the professional of record who signs and certifies the drawings, and the sanctioning authority, hold those binding duties under the governing byelaws - a checking tool does not stand in for either.
Accountability stays with humans and the authoritative law
From naming the parties comes the principle the whole lesson defends: accountability for compliance must stay with the accountable humans and the authoritative law, and an automated check must never be allowed to inherit it. This is not nostalgia or distrust of technology; it is a requirement that follows from what the tool is and is not.
Start from what a check actually establishes. A 'pass' means only that the encoded rules the tool could evaluate found no flaggable issue in the data it was given. It does not mean the design complies - the encoding may be wrong or stale, the model data may be false or incomplete, the uncheckable and judgement-laden rules are untouched, and interpretation the tool cannot do remains undone. So a pass is evidence, sometimes strong evidence, that certain checkable requirements are probably met; it is never a determination of compliance and never an approval. A determination of compliance is a human act of judgement against the law, and an approval is a legal act of an authority. Neither can be performed by a tool, so neither responsibility can rest on one. The designer of record must still exercise judgement and certify; the authority must still decide and approve; and both must do so against the actual code and byelaw, not against the tool's reading of it.
This is why the honest framing of an automated check is as an assistant - it finds likely issues fast, catches missed clauses early, reduces the mechanical burden, and gives the accountable humans better information to exercise their judgement with. It augments them; it does not replace them or absorb their duty. The failure mode to guard against is the quiet slide from 'the tool helped me check' to 'the tool checked it', because the second sentence has smuggled the responsibility onto something that cannot hold it. Designing the human-tool relationship well means keeping the human visibly in the loop and answerable: the professional reviews and owns the result, the authority decides, and the tool's output is logged as input, not verdict. Hold that line and automation makes compliance faster and more consistent without hollowing out responsibility. Lose it, and you get speed and consistency with no one answerable when it goes wrong - which, for buildings people live and work in, is a bargain no one should accept. The authoritative rule is the law; the accountable parties are human.
Building workflows where responsibility stays legible
Principles hold only if the workflow is built to keep them, so it is worth being concrete about what keeps accountability legible in practice - because good intentions drift under time pressure, and a badly designed process quietly transfers responsibility to the tool whatever anyone intended.
The first practice is honest tool design and marketing: a check should present itself as an assistant, report unknowns and scope limits as prominently as passes, and never use the language of approval or 'automatic compliance'. A tool that overclaims invites over-trust and is the first mover in creating an accountability gap. The second is keeping the human in the loop by design: the professional of record reviews the tool's output, signs off on the design against the actual regulations, and records that they did so - the sign-off, not the tick, is the act that carries responsibility. The third is traceability and logging: recording which rule versions were checked, for which jurisdiction, on what data, with what result, so that if something is later questioned the chain can be reconstructed and each party's contribution examined - this is also what lets a genuine encoding or tool failure be identified and fixed rather than absorbed. The fourth is preserving the authority's independent judgement: even where an authority accepts checking results into its process, its determination and approval must remain its own act against the law, not a rubber stamp of the tool.
None of this is exotic, but it has to be deliberate, because the default drift is the other way - toward trusting the tick, skipping the review under deadline, and treating a machine result as the decision. The competent posture is to use automated checking exactly where it earns its place (fast, early, consistent checking of the clean quantitative subset) while engineering the process so that a human always reviews, a human always signs, an authority always decides, and every result is traceable to a dated rule and a named party. Studio Matrx teaches this as a matter of professional integrity as much as technique: the tool is a genuine help, but whether this building complies, and who answers for it, must never be questions the software is left to answer. Defer every binding result - actual compliance, the authoritative interpretation, and legal responsibility - to the qualified professional of record, the approving authority and the governing law.
The accountability gap is real
Automation in shared decisions
Distributing a check across vendor, encoder, designer and authority plus a machine diffuses responsibility; the tool becomes a tempting but false place to park blame. Modules 8.3, 9.4.
Bounded vs binding duties
Who is answerable for what
Vendor and encoder owe an honest, faithful, current tool; only the designer of record and the authority hold the binding duties of whether the design complies and whether it is approved. Modules 8.3, 7.3.
A check is not an approval
What a 'pass' can carry
A pass is evidence certain checkable rules are probably met - never a determination of compliance and never an approval. Those are human and legal acts against the law. Modules 7.3, 9.1.
Design for legible responsibility
Keeping accountability human
Honest tool design, a human in the loop who reviews and signs, traceability of rule versions and data, and the authority's independent judgement keep responsibility with people. Modules 8.4, 9.4.
Workshop - map the accountability of one failed check
Accountability becomes concrete when you trace a specific failure through every hand it passed. In this workshop you take one plausible automated-check failure and map exactly who did what, what each is answerable for, and where the binding responsibility lands - then design the safeguards that would keep it legible.
A described scenario and a notebook - no software. This is an exercise in reasoning about responsibility; the binding determination of compliance and legal responsibility always rest with the qualified professional of record, the approving authority and the actual law.
Goal: separate bounded from binding responsibility in a real failure Inputs: a described failure scenario + notebook Time: ~40 minutes
- 1Write the scenario: describe a plausible failure - e.g. an automated check passed a design whose escape-route travel distance actually exceeds the current byelaw - and note how it happened (stale rule, mislabelled model data, skipped human review, or a mix).
- 2Name every hand: list the vendor, rule-encoder, designer of record, and approving authority, and write one line on what each did or relied on in this scenario.
- 3Separate the duties: for each party, state what they can legitimately be answerable for and what they cannot - and identify which one or two parties hold the binding duty for whether the design complies.
- 4Locate the drift: point to the exact moment responsibility could have slid onto 'the tool', and explain why the tool cannot hold it.
- 5Design safeguards as reasoning: propose the honesty, human-in-the-loop, traceability and authority-judgement practices that would have kept accountability legible - framed as reasoning, with binding responsibility deferred to the professional, the authority and the law.
You’ll walk away with
A one-page accountability map: the failure scenario, every hand named, bounded vs binding duties separated, the point of dangerous drift identified, and the safeguards that keep responsibility human - framed as reasoning, deferring binding accountability to the professional of record, the authority and the governing law.
Three altitudes on the same idea
Read the band that fits you — or all three.
When you run an automated check, you do not offload responsibility - as the professional of record you remain answerable for whether the design complies, whatever the tick says. That has practical consequences. Own the model data you feed the check: a pass on false or incomplete data is worthless, and that is your input. Treat the tool's output as information for your judgement, not a verdict that ends it - review it, decide against the actual code and byelaw, and record your sign-off, because it is your certification, not the green tick, that carries the duty. Understand the bounded roles of the others: the vendor and encoder owe you an honest, faithful, current instrument, and a genuine tool failure is a real failing on their part, but neither ever certified your building. Keep results traceable to dated rules and jurisdictions so a problem can be diagnosed rather than blamed on 'the system'. The binding interpretation and determination stay with you and the approving authority, against the governing law.
An automated accessibility or fire check does not make you less responsible for a safe, compliant interior - it gives you better information, and the accountability for using it well stays yours. If a checker misses an under-width accessible route or an over-long escape path because your model mislabelled a door or omitted a wall, that is your data and your responsibility, not the tool's. If it passes a design that is technically within the encoded proxy but genuinely unusable, your professional judgement is what should catch it. Use the check as an early-warning assistant, but coordinate binding fire, egress and accessibility compliance with the qualified professionals of record and the authority, and confirm provisions against the actual current standard and byelaw. The vendor and encoder owe you an honest, current tool; you and the accountable professionals owe the occupant a safe, compliant space. A green tick never signs off an interior - a responsible human does.
This lesson teaches a governance idea that reaches well beyond buildings: when you put automation into a decision shared by many hands, responsibility can dissolve into an accountability gap - and closing it is a design choice, not an accident. Learn to name the parties around an automated compliance check (vendor, rule-encoder, designer of record, approving authority) and to separate what each can legitimately be answerable for - the tool and its makers owe an honest, faithful, current instrument; only the designer of record and the authority hold the binding duties of whether the design complies and whether it is approved. Grasp why the tool can never inherit those duties: it cannot hold a duty, be sanctioned, owe a standard of care, or explain itself to an inquiry, so letting blame settle on 'the system' is the absence of an answer. And learn the practices that keep responsibility legible - honest tool design, humans in the loop, traceability, and the authority's independent judgement. The enduring principle: accountability stays with humans and the authoritative law. It is a mature, systems-aware idea that marks out serious thinking about automation anywhere.
“If a design passed an automated compliance check and a problem later turns up, the responsibility lies with the checking tool or its vendor - the software said it was fine, so the software (or whoever made it) is to blame, and the designer and authority who relied on it are off the hook.”
Do it yourself
No software needed - reason it through.
- 1Explain the accountability gap: why does responsibility seem to dissolve when a machine joins a shared decision?
- 2For the vendor, the rule-encoder, the designer of record and the authority, name one thing each is and is not answerable for.
- 3Why can a tool never inherit the duty to decide whether a design complies?
- 4Describe the quiet slide from 'the tool helped me check' to 'the tool checked it', and why it is dangerous.
- 5Name four practices that keep accountability legible in an automated-checking workflow.
The one line to carry out
Peer-reviewed journals & authoritative standards
- 01Accountability — Wikipedia - Accountability, 2026.
- 02Professional responsibility — Wikipedia - Professional responsibility, 2026.
- 03Automation bias — Wikipedia - Automation bias, 2026.
- 04Regulatory compliance — Wikipedia - Regulatory compliance, 2026.
- 05Quality assurance — Wikipedia - Quality assurance, 2026.
Keeping accountability legible depends on being able to see how a rule was encoded and applied - which is far easier when the rules are open than when they sit in a vendor's black box. That governance choice - open versus proprietary rules - is where the module ends.
The author
Amogh N P
Architect, interior designer, and creative polymath. Studio Matrx began in his notebooks — his vision of design made honest, useful, and open to everyone. Its Academy is written and taught in his memory, and free, forever.
More about Amogh →