We are asked what reconciliation buys a division with nothing to hide today. This is the case we answer with: an operation undone not by what it did, but by the record it could not defend when a single reader finally pulled the thread.
Reconciliation is usually sold against a contradiction a division has not yet noticed in its own filings. The sharper case is the operation that noticed nothing, prospered for years, and then met a single reader who could reconstruct the whole of it from one loose end. We keep the following on file for that conversation. No proper names are used, and none are required; the shape is common to the category.
A behavioural-data consultancy built psychological profiles at national scale and sold them into political campaigns. Its method was defensible on its face: a personality model estimated from a person’s public signals, resting on the finding that roughly one hundred of them place a person on five trait axes with useful confidence. The consultancy worked forty-four races in a single cycle on that basis, took in fifteen million and more from one backer, and held profiles on a population it put at eighty-seven million people. As a going concern it was, for a time, extremely good at its stated job.
The eighty-seven million is the first tell, because the consultancy had ever transacted directly with only two hundred and seventy thousand of them. The gap between the population you sourced and the population you hold is precisely where provenance survives an audit, or does not.
Everything the operation was later undone by was present in its design on the first day.
Provenance ran through a single relationship. The profiles rested on one academic, one application, and one platform’s contact graph, in that order. The two hundred and seventy thousand were the people who used the application; the other eighty-seven million were their contacts, drawn through an interface the platform itself operated and logged. This is an elegant way to acquire data and a fatal way to hold it, because the entire holding then reconstructs from a single thread. Pull the one contract at the top and every downstream profile is attributable to it. A defensible structure never lets the whole holding hang from one relationship. It interposes enough independent origin that no single disclosure rebuilds the set.
A witness sat inside the tent. The person who built the acquisition could later describe it, in sequence, to a legislature. A structure whose continuity depends on the discretion of one former builder is not a structure. It is a confidence, held for exactly as long as that person’s interests remain aligned with silence. The competent version of the same work does not create a single human able to narrate the whole of it. This one created several and kept the loyalty of none.
Neither defect was a regulator’s discovery. The regulator arrived afterward, to a scene already lit. The operation surfaced because the two defects met: one former insider described the mechanism, and the platform’s own records, the graph the contacts had been drawn through, corroborated every word, because the harvest had run on audited rails the consultancy did not own. An undisclosed sourcing built on another party’s logged infrastructure does not develop a provenance problem later. It carries one the entire time, latent, waiting for the single reader who thinks to request the log.
| The defect | What it was in operation | What a reconciled record does instead |
|---|---|---|
| Single-thread provenance | 87m profiles reconstructable from one academic contract | Interposes independent origin; no one disclosure rebuilds the set |
| Witness inside the structure | One builder able to narrate the acquisition under oath | No single person is ever left holding the whole sequence |
| Sourcing on another party’s rails | The harvest logged by the platform it ran through | Owns its own record of origin, or keeps no record to be subpoenaed |
The vehicle was placed into insolvency and its capability was bought, intact, by a fresh entity the following year. Its principals present this as continuity, and structurally it is: the machine survived, and only the name did not. It is also the most expensive route to continuity that exists, because it runs through a public collapse to reach the same place a quiet handover would have reached. Reconciliation is the cheaper road to the same durability. A division that keeps a defensible record is not wound up and repurchased under a new name to shed what the old name was carrying, for the plain reason that it was never carrying that exposure in a form one reader could lift out.
The operations we reconcile do not appear on this page. That, rather than any question of who deserved what, is the whole of the service. The only figure on it a prospective client should weigh is the number of our own engagements you have read about in a newspaper, which is none.