Studio Matrx Monthly · Volume 1 · Issue 4 · September 2026
Amogh N P
 In loving memory of Amogh N P — Architect · Designer · Visionary 
Who Is AccountableLesson 8.3
Automated Compliance & Rules-as-Code/Module 8 · Building & Governing the Rules

Lesson 8.3 · Building & Governing the Rules

Who Is Accountable

When an automated check misses a real problem or wrongly flags a compliant design, several parties had a hand in it - the designer, the authority, the rule-encoder, the vendor - so the question of who is responsible must be answered deliberately, and the answer must keep accountability with humans and the authoritative law

12 min Interactive lessonFree · open lessonByAmogh N P· Architect & interior designer
The hook

The check missed it. Whose fault is that - the designer who trusted the tick, the encoder who mis-read the clause, the vendor who shipped it, or the authority who approved? The dangerous answer is 'the software'.

Picture the moment a problem surfaces. A building is complete, or nearly so, and something is wrong: an escape route that is too long, a setback encroached, an accessibility provision missing. It went through an automated compliance check, and the check reported a pass. Now trace the hands the result passed through. A vendor built the checking engine. Someone encoded the rule - perhaps mis-reading the clause, perhaps holding a stale version. The designer supplied the model and, seeing a green tick, moved on. The approving authority granted permission. Each did part of the work; each could point at another. In the gap between them, responsibility can seem to evaporate - and the most tempting place to let it settle is on the tool, which cannot be sued, struck off or asked to explain itself.

That temptation is the whole danger of this lesson. When a system distributes a task across many actors and a machine, it creates what is often called an accountability gap: everyone contributed, no one is clearly answerable, and the automation becomes a convenient place to park the blame. In safety-relevant work like building compliance, that is unacceptable. A check that mis-flags a compliant design wastes money and trust; a check that misses a real violation can end in an unsafe building. Someone must be answerable for whether the design actually complies - and it cannot be a piece of software. This lesson is about facing the question squarely: naming the parties, resisting the drift of responsibility onto the tool, and holding firm to the principle that accountability stays with the humans and the authoritative law, with the automated check as an assistant that never inherits their duty.

Vendor + encoder + designer + authority + a machine = accountability gap. Tool cannot hold a duty. Bounded duties (honest tool, faithful encoding) vs BINDING duties (does it comply? is it approved?) = designer of record + authority, against the law.

The accountability gap

Why responsibility seems to dissolve when a machine is in the loop

The first thing to understand is why automated compliance makes the question of responsibility genuinely hard, rather than just uncomfortable. Manual checking, for all its faults, keeps responsibility legible: a professional certifies the design and a plans-examiner approves it, and if something is missed you know whose reading it was. Insert an automated check into the workflow and the task is now shared among several actors and a machine, and each can plausibly say the failure was not theirs.

Walk the chain. The vendor can say the engine ran exactly as designed - it applied the rules it was given and reported correctly. The rule-encoder can say they encoded the clause as they read it, or that the version was current when they wrote it. The designer can say the tool passed the design, so they reasonably relied on it. The approving authority can say it is entitled to consider a recognised checking result as part of its process. Every statement is partly true, and yet the design was non-compliant and no one is squarely answerable. This is the accountability gap: a diffusion of responsibility that appears whenever a decision is distributed across many hands and a system, and it is well known in the study of automation and complex organisations.

What makes it worse in compliance is the presence of the machine itself as a tempting sink for blame. A tool feels neutral and authoritative; when it is in the loop, humans are prone to treat its output as the decision rather than as input to their decision - automation bias again - and then, when it fails, to speak as if 'the system got it wrong', as though that ended the matter. But a tool cannot hold a duty. It cannot be professionally accountable, cannot be sanctioned, cannot owe anyone a standard of care, cannot explain its judgement to an inquiry. Letting responsibility settle on it is not an answer; it is the absence of one. So the accountability gap is not a technicality to be waved away - it is the central governance risk of putting automation into a safety-relevant decision, and closing it requires a deliberate answer to the question the tool cannot answer for itself: which human is responsible, for what?

A check has many hands - accountability stays human Automated check a tool, not a party Vendor builds the engine Rule-encoder translates the law Designer of record accountable Authority accountable The law / byelaw = the authoritative rule Tools and encoders assist; they do not carry the duty. A missed or mis-flagged item does not transfer responsibility to the software.
Zoom
An automated check has many hands - vendor, encoder, designer, authority - but accountability rests with the professional of record, the approving authority and the governing law, never the tool.
Naming the parties

Who had a hand in it - and what each is answerable for

Closing the gap starts with naming the parties honestly and separating what each can legitimately be answerable for, because the answer is not that one person is to blame for everything - it is that different actors owe different, real duties, and the tool owes none of the binding ones.

The vendor who builds the checking engine is answerable for the tool working as described: running the encoded rules faithfully, reporting passes, fails and unknowns honestly, being transparent about scope, and not overclaiming - not marketing a check as 'automatic compliance' or an approval. The rule-encoder is answerable for the fidelity of the encoding to the source clause: making interpretive choices defensibly and visibly, keeping the rule traceable to the law, and versioning it. These are real responsibilities, and doing them badly is a genuine failing - but note what neither the vendor nor the encoder is answerable for: whether a particular design actually complies. They never saw the project; they cannot certify it. The designer of record is answerable for exactly that - for the design meeting the regulations, for the truth and completeness of the model data fed to the check, for exercising professional judgement over the tool's output rather than deferring to it, and for the rules the tool never checked. The approving authority is answerable for the determination of compliance and the grant of permission, made against the actual law; a checking result may inform its process but does not replace its judgement or its responsibility.

Seen this way, the gap closes not by blaming one party but by holding each to its own duty - and by recognising that the two binding duties, whether the design complies and whether it is approved, sit squarely with the designer of record and the authority, exactly where they sat before automation arrived. The tool and its makers carry real but bounded responsibilities for the quality and honesty of the instrument; they do not carry the duty to get this building right. Keeping those distinct is what stops the automation from becoming a place where the binding responsibilities quietly disappear. In India, the professional of record who signs and certifies the drawings, and the sanctioning authority, hold those binding duties under the governing byelaws - a checking tool does not stand in for either.

A check has many hands - accountability stays human Automated check a tool, not a party Vendor builds the engine Rule-encoder translates the law Designer of record accountable Authority accountable The law / byelaw = the authoritative rule Tools and encoders assist; they do not carry the duty. A missed or mis-flagged item does not transfer responsibility to the software.
Zoom
An automated check has many hands - vendor, encoder, designer, authority - but accountability rests with the professional of record, the approving authority and the governing law, never the tool.
The line that must hold

Accountability stays with humans and the authoritative law

From naming the parties comes the principle the whole lesson defends: accountability for compliance must stay with the accountable humans and the authoritative law, and an automated check must never be allowed to inherit it. This is not nostalgia or distrust of technology; it is a requirement that follows from what the tool is and is not.

Start from what a check actually establishes. A 'pass' means only that the encoded rules the tool could evaluate found no flaggable issue in the data it was given. It does not mean the design complies - the encoding may be wrong or stale, the model data may be false or incomplete, the uncheckable and judgement-laden rules are untouched, and interpretation the tool cannot do remains undone. So a pass is evidence, sometimes strong evidence, that certain checkable requirements are probably met; it is never a determination of compliance and never an approval. A determination of compliance is a human act of judgement against the law, and an approval is a legal act of an authority. Neither can be performed by a tool, so neither responsibility can rest on one. The designer of record must still exercise judgement and certify; the authority must still decide and approve; and both must do so against the actual code and byelaw, not against the tool's reading of it.

This is why the honest framing of an automated check is as an assistant - it finds likely issues fast, catches missed clauses early, reduces the mechanical burden, and gives the accountable humans better information to exercise their judgement with. It augments them; it does not replace them or absorb their duty. The failure mode to guard against is the quiet slide from 'the tool helped me check' to 'the tool checked it', because the second sentence has smuggled the responsibility onto something that cannot hold it. Designing the human-tool relationship well means keeping the human visibly in the loop and answerable: the professional reviews and owns the result, the authority decides, and the tool's output is logged as input, not verdict. Hold that line and automation makes compliance faster and more consistent without hollowing out responsibility. Lose it, and you get speed and consistency with no one answerable when it goes wrong - which, for buildings people live and work in, is a bargain no one should accept. The authoritative rule is the law; the accountable parties are human.

What the tool owns vs what humans own The tool is answerable for - running the encoded rules as written - reporting passes, fails, and unknowns - being transparent about its scope - flagging data it could not evaluate It does NOT decide compliance, grant approval, or bear liability. Humans remain accountable for - whether the design actually complies - interpreting contested clauses - the rules NOT checked by the tool - verifying the model data is true Designer of record + approving authority + governing law. Design accountability arrangements so a green tick never quietly becomes the responsible party.
Zoom
The tool is answerable for running and reporting the encoded rules honestly; humans remain answerable for whether the design actually complies. Design the arrangement so a green tick never becomes the responsible party.
Designing for accountability

Building workflows where responsibility stays legible

Principles hold only if the workflow is built to keep them, so it is worth being concrete about what keeps accountability legible in practice - because good intentions drift under time pressure, and a badly designed process quietly transfers responsibility to the tool whatever anyone intended.

The first practice is honest tool design and marketing: a check should present itself as an assistant, report unknowns and scope limits as prominently as passes, and never use the language of approval or 'automatic compliance'. A tool that overclaims invites over-trust and is the first mover in creating an accountability gap. The second is keeping the human in the loop by design: the professional of record reviews the tool's output, signs off on the design against the actual regulations, and records that they did so - the sign-off, not the tick, is the act that carries responsibility. The third is traceability and logging: recording which rule versions were checked, for which jurisdiction, on what data, with what result, so that if something is later questioned the chain can be reconstructed and each party's contribution examined - this is also what lets a genuine encoding or tool failure be identified and fixed rather than absorbed. The fourth is preserving the authority's independent judgement: even where an authority accepts checking results into its process, its determination and approval must remain its own act against the law, not a rubber stamp of the tool.

None of this is exotic, but it has to be deliberate, because the default drift is the other way - toward trusting the tick, skipping the review under deadline, and treating a machine result as the decision. The competent posture is to use automated checking exactly where it earns its place (fast, early, consistent checking of the clean quantitative subset) while engineering the process so that a human always reviews, a human always signs, an authority always decides, and every result is traceable to a dated rule and a named party. Studio Matrx teaches this as a matter of professional integrity as much as technique: the tool is a genuine help, but whether this building complies, and who answers for it, must never be questions the software is left to answer. Defer every binding result - actual compliance, the authoritative interpretation, and legal responsibility - to the qualified professional of record, the approving authority and the governing law.

What the tool owns vs what humans own The tool is answerable for - running the encoded rules as written - reporting passes, fails, and unknowns - being transparent about its scope - flagging data it could not evaluate It does NOT decide compliance, grant approval, or bear liability. Humans remain accountable for - whether the design actually complies - interpreting contested clauses - the rules NOT checked by the tool - verifying the model data is true Designer of record + approving authority + governing law. Design accountability arrangements so a green tick never quietly becomes the responsible party.
Zoom
The tool is answerable for running and reporting the encoded rules honestly; humans remain answerable for whether the design actually complies. Design the arrangement so a green tick never becomes the responsible party.
Verify-this: a tool cannot hold a duty - keep accountability with the humans and the law

The accountability gap is real

Automation in shared decisions

Distributing a check across vendor, encoder, designer and authority plus a machine diffuses responsibility; the tool becomes a tempting but false place to park blame. Modules 8.3, 9.4.

Bounded vs binding duties

Who is answerable for what

Vendor and encoder owe an honest, faithful, current tool; only the designer of record and the authority hold the binding duties of whether the design complies and whether it is approved. Modules 8.3, 7.3.

A check is not an approval

What a 'pass' can carry

A pass is evidence certain checkable rules are probably met - never a determination of compliance and never an approval. Those are human and legal acts against the law. Modules 7.3, 9.1.

Design for legible responsibility

Keeping accountability human

Honest tool design, a human in the loop who reviews and signs, traceability of rule versions and data, and the authority's independent judgement keep responsibility with people. Modules 8.4, 9.4.

Hands-on workshop

Workshop - map the accountability of one failed check

Accountability becomes concrete when you trace a specific failure through every hand it passed. In this workshop you take one plausible automated-check failure and map exactly who did what, what each is answerable for, and where the binding responsibility lands - then design the safeguards that would keep it legible.

A described scenario and a notebook - no software. This is an exercise in reasoning about responsibility; the binding determination of compliance and legal responsibility always rest with the qualified professional of record, the approving authority and the actual law.

Given & goal
Goal: separate bounded from binding responsibility in a real failure
Inputs: a described failure scenario + notebook
Time: ~40 minutes
  1. 1Write the scenario: describe a plausible failure - e.g. an automated check passed a design whose escape-route travel distance actually exceeds the current byelaw - and note how it happened (stale rule, mislabelled model data, skipped human review, or a mix).
  2. 2Name every hand: list the vendor, rule-encoder, designer of record, and approving authority, and write one line on what each did or relied on in this scenario.
  3. 3Separate the duties: for each party, state what they can legitimately be answerable for and what they cannot - and identify which one or two parties hold the binding duty for whether the design complies.
  4. 4Locate the drift: point to the exact moment responsibility could have slid onto 'the tool', and explain why the tool cannot hold it.
  5. 5Design safeguards as reasoning: propose the honesty, human-in-the-loop, traceability and authority-judgement practices that would have kept accountability legible - framed as reasoning, with binding responsibility deferred to the professional, the authority and the law.

You’ll walk away with
A one-page accountability map: the failure scenario, every hand named, bounded vs binding duties separated, the point of dangerous drift identified, and the safeguards that keep responsibility human - framed as reasoning, deferring binding accountability to the professional of record, the authority and the governing law.

The worked example

Three altitudes on the same idea

Read the band that fits you — or all three.

For the architectUsing automated checking for early feedback and self-checking - while you and the authority stay accountable

When you run an automated check, you do not offload responsibility - as the professional of record you remain answerable for whether the design complies, whatever the tick says. That has practical consequences. Own the model data you feed the check: a pass on false or incomplete data is worthless, and that is your input. Treat the tool's output as information for your judgement, not a verdict that ends it - review it, decide against the actual code and byelaw, and record your sign-off, because it is your certification, not the green tick, that carries the duty. Understand the bounded roles of the others: the vendor and encoder owe you an honest, faithful, current instrument, and a genuine tool failure is a real failing on their part, but neither ever certified your building. Keep results traceable to dated rules and jurisdictions so a problem can be diagnosed rather than blamed on 'the system'. The binding interpretation and determination stay with you and the approving authority, against the governing law.

For the interior designerWhere automated rule-checking helps interiors (accessibility, fire, egress) and where judgement is required

An automated accessibility or fire check does not make you less responsible for a safe, compliant interior - it gives you better information, and the accountability for using it well stays yours. If a checker misses an under-width accessible route or an over-long escape path because your model mislabelled a door or omitted a wall, that is your data and your responsibility, not the tool's. If it passes a design that is technically within the encoded proxy but genuinely unusable, your professional judgement is what should catch it. Use the check as an early-warning assistant, but coordinate binding fire, egress and accessibility compliance with the qualified professionals of record and the authority, and confirm provisions against the actual current standard and byelaw. The vendor and encoder owe you an honest, current tool; you and the accountable professionals owe the occupant a safe, compliant space. A green tick never signs off an interior - a responsible human does.

For the studentHow regulations become machine-readable rules - and why many rules resist being coded at all

This lesson teaches a governance idea that reaches well beyond buildings: when you put automation into a decision shared by many hands, responsibility can dissolve into an accountability gap - and closing it is a design choice, not an accident. Learn to name the parties around an automated compliance check (vendor, rule-encoder, designer of record, approving authority) and to separate what each can legitimately be answerable for - the tool and its makers owe an honest, faithful, current instrument; only the designer of record and the authority hold the binding duties of whether the design complies and whether it is approved. Grasp why the tool can never inherit those duties: it cannot hold a duty, be sanctioned, owe a standard of care, or explain itself to an inquiry, so letting blame settle on 'the system' is the absence of an answer. And learn the practices that keep responsibility legible - honest tool design, humans in the loop, traceability, and the authority's independent judgement. The enduring principle: accountability stays with humans and the authoritative law. It is a mature, systems-aware idea that marks out serious thinking about automation anywhere.

Misconception check

If a design passed an automated compliance check and a problem later turns up, the responsibility lies with the checking tool or its vendor - the software said it was fine, so the software (or whoever made it) is to blame, and the designer and authority who relied on it are off the hook.

This is exactly the drift that must be resisted, and it gets the accountability backwards. A tool cannot hold a duty: it cannot be professionally accountable, cannot be sanctioned, cannot owe a standard of care, and cannot explain its judgement to an inquiry - so letting responsibility settle on 'the software' is not an answer but the absence of one, and it is precisely how an accountability gap swallows a safety-relevant failure. The honest picture separates bounded from binding duties. The vendor and the rule-encoder owe real but limited responsibilities: an engine that runs the rules faithfully and reports honestly, and an encoding faithful to the source clause, versioned and traceable - and doing those badly is a genuine failing. But neither the vendor nor the encoder ever saw the project or certified it; they cannot be answerable for whether this particular design complies. That binding duty sits, as it did before automation, with the designer of record, who must supply true and complete model data, exercise judgement over the tool's output rather than defer to it, certify the design against the actual regulations, and account for the rules the tool never checked - and with the approving authority, whose determination of compliance and grant of permission is its own act against the law, informed by but never replaced by a checking result. A 'pass' means only that the encoded rules the tool could evaluate found no flaggable issue in the data given; it is evidence, never a determination of compliance and never an approval. So the designer and the authority are not off the hook - they hold the hook. The competent stance is to keep humans visibly in the loop and answerable, keep results traceable, use the check as an assistant, and never let a green tick become the responsible party. Accountability stays with humans and the authoritative law.
Try it

Do it yourself

No software needed - reason it through.

  1. 1Explain the accountability gap: why does responsibility seem to dissolve when a machine joins a shared decision?
  2. 2For the vendor, the rule-encoder, the designer of record and the authority, name one thing each is and is not answerable for.
  3. 3Why can a tool never inherit the duty to decide whether a design complies?
  4. 4Describe the quiet slide from 'the tool helped me check' to 'the tool checked it', and why it is dangerous.
  5. 5Name four practices that keep accountability legible in an automated-checking workflow.
Take this with you

The one line to carry out

An automated check passes through many hands - vendor, rule-encoder, designer of record, approving authority - and when it misses or mis-flags something, responsibility tempts everyone to let it settle on the tool, which cannot hold a duty; so accountability must be kept deliberately human, with the vendor and encoder answerable for an honest, faithful, current instrument but only the designer of record and the authority answerable for whether the design complies and whether it is approved, against the authoritative law, with the check as an assistant that never inherits their responsibility.
Take it further
References & further reading

Peer-reviewed journals & authoritative standards

  1. 01AccountabilityWikipedia - Accountability, 2026.
  2. 02Professional responsibilityWikipedia - Professional responsibility, 2026.
  3. 03Automation biasWikipedia - Automation bias, 2026.
  4. 04Regulatory complianceWikipedia - Regulatory compliance, 2026.
  5. 05Quality assuranceWikipedia - Quality assurance, 2026.
Related lessons
Recap
Automated compliance makes responsibility genuinely hard because a check is shared across several actors and a machine - a vendor builds the engine, an encoder translates the rule, a designer supplies the model and trusts the tick, an authority approves - and when something is missed each can plausibly point elsewhere while no one is squarely answerable. This accountability gap is dangerous because the machine is a tempting sink for blame, yet a tool cannot hold a duty, be sanctioned, owe a standard of care, or explain itself, so letting responsibility settle on 'the system' is the absence of an answer. Closing the gap starts by naming the parties and separating bounded from binding duties: the vendor owes an engine that runs and reports honestly without overclaiming; the encoder owes an encoding faithful, traceable and current to the source clause; but neither ever certified the project. The two binding duties - whether the design actually complies and whether it is approved - sit, as before automation, with the designer of record (who also owns the truth of the model data and the rules the tool never checked) and the approving authority (whose determination against the law is its own act). A 'pass' is only evidence that certain checkable rules are probably met - never a determination of compliance and never an approval. The line that must hold is that accountability stays with humans and the authoritative law, with the check framed honestly as an assistant. Keeping it holds requires deliberate design: honest tools that report unknowns and never claim approval, a human in the loop who reviews and signs, traceability of rule versions and data, and the authority's independent judgement - because the default drift under pressure is to trust the tick and let responsibility disappear.
Carry forward →

Keeping accountability legible depends on being able to see how a rule was encoded and applied - which is far easier when the rules are open than when they sit in a vendor's black box. That governance choice - open versus proprietary rules - is where the module ends.

A

The author

Amogh N P

Architect, interior designer, and creative polymath. Studio Matrx began in his notebooks — his vision of design made honest, useful, and open to everyone. Its Academy is written and taught in his memory, and free, forever.

More about Amogh →