Lab ya IT ilikuwa na watu wanane tu.
Grace, Karanja, IT lead, Wema, Zuri, legal officer, monitoring analyst na vendor representative kwenye video call.
“Hatutaona source code,” vendor rep alisema.
Grace akajibu, “Tumeafikiana. Tunataka reproducible output kwa inputs synthetic.”
Case control iliingizwa kwanza: stable declared need, ordinary food purchases, no peer signal. Outcome: green.
Case ya helmet iliingizwa.
Fields zilionyesha declared need unchanged, merchant category *equipment*, unusual purchase flag, no context field. Simulator ilitoa:
**HIGH RISK — AUTO SUSPEND PENDING REVIEW.**
Zuri akasema, “Lakini helmet ni course requirement.”
IT lead akanyoosha mkono. “Schema haina field ya course requirement.”
Karanja akasema, “Human review inaweza kurekebisha.”
Grace akauliza, “Before or after suspension?”
Kimya.
Vendor rep akasema, “Current configuration applies provisional hold.”
“Kwa student, provisional hold ni kukosa chakula,” Wema alisema.
Karanja akamwangalia. “Na fraud ikiachwa?”
Wema alikubali. “Ndiyo maana sisemi futa review. Ninasema auto-sanction isitokee kabla ya context.”
Case ya funeral transport ikaingia. Outcome: medium risk, auto restriction on selected aid modules.
“Kwa nini transport inachukuliwa?” Grace akauliza.
Vendor rep akaeleza unusual spend deviation.
“Na kama mtu amepewa ticket na relative?”
“Gift context not represented.”
Karanja akaegemea mbele. “Model inalinda limited funds. Hatuwezi kuomba explanation kwa kila anomaly.”
“Basi policy yenu ya holistic need haiwezi kutekelezwa na schema yenu,” Wema alisema.
Hilo likafanya room ikae kimya.
Legal officer akauliza IT lead, “Je, context fields zinaweza kuongezwa?”
“Ndiyo, lakini redesign.”
“Na interim?”
“Disable auto-sanctions, retain flag for manual queue.”
Karanja akatikisa kichwa. “Turnaround itaporomoka.”
Grace akasema, “Control objective inaweza kubaki. Implementation ndiyo tunapima.”
Wema alijua coalition yake ingeweza kusukuma “kill the model.” Kelvin angependa. Lakini plan yao ya assembly ilikuwa fairness, si revenge.
“Ninapendekeza temporary halt ya auto-sanctions,” Wema alisema. “Flags zibaki. Emergency access isitenganishwe. Manual review ipokee context.”
Zuri akaongeza, “Na appeal panel ianze.”
Karanja alikaa kimya kwa muda mrefu. “Manual review itahitaji staff.”
Grace akasema, “Donor reserve inaweza cover interim staffing pending redesign.”
Hilo lilibadilisha negotiation.
Legal officer akaandaa interim note. Vendor rep alikubali configuration inaweza kubadilishwa ndani ya saa chache.
Wema hakutabasamu mpaka test nyingine ilifanyika baada ya auto-sanction toggle kuzimwa. Helmet case bado iliflag, lakini status ikawa **REVIEW REQUIRED — NO SERVICE SUSPENSION**.
Hapo ndipo tofauti ilionekana.
Karanja akamgeukia Wema. “Unajua fraud cases zitaongezeka backlog.”
“Najua.”
“Na mkija kulalamika juu ya delay?”
“Tutalalamika kwa data.”
Kwa mara ya kwanza Karanja alicheka bila PR. “At least you are consistent.”
Grace alisaini interim finding.
Wema aliisoma kabla haijatumwa:
**Control objective valid; implementation materially unfair. Auto-sanctions halted pending redesign.**
Hakuwa verdict ya mtu. Ilikuwa verdict ya mfumo wa utekelezaji.
Baada ya outputs za kwanza, vendor representative alipendekeza kuongeza manual override field kwenye simulator na ku-run tena.
Grace akakataa mara moja. “Override haikuwepo kabla ya adverse action kwenye current workflow. Tukiongeza sasa, hatupimi implementation ya sasa.”
Huo ulikuwa moment ambayo Wema aliona test integrity ikitetewa na mtu mwingine.
IT lead akatoa configuration log inayoonyesha auto-sanction toggle ilikuwa enabled kwa red band. Hakukuwa na student data ndani ya log. Legal officer akakubali ionekane.
Karanja alisema, “Red band cases ni minority.”
Grace akauliza, “Minority ya nini? Tunahitaji denominator.”
Hakukuwa na immediate answer.
Wema hakutumia ukimya huo kama attack. Badala yake aliuliza technical question: “Je, emergency meal module inaweza kutenganishwa na review outcome bila kubadilisha scoring?”
IT lead akasema ndiyo. Service propagation ilikuwa configuration tofauti.
Hivyo interim remedy ikawa na sehemu mbili: disable auto-sanction na disable propagation to unrelated essential services. Flags zibaki kwa manual review.
Zuri akauliza, “Na peer signal?”
Vendor rep alisema inaweza kubaki input.
Wema akasema, “Bila standard ya verification, hiyo itabaki problem. Lakini temporary halt inazuia punishment before context.”
Grace akaandika issue hiyo kwa redesign phase.
Wakati toggle ilizimwa, IT lead alionyesha audit log yenye timestamp. Wema aliomba screenshot isiwe na internal credentials. Grace akasema monitoring report itabeba record rasmi, hivyo Wema hakuhitaji copy.
Karanja alionekana amechoka kuliko angry.
“Nilitaka turnaround,” alisema kwa sauti ya chini wakati wengine wakikusanya vifaa.
Wema akasema, “Na students walitaka explanations.”
“Huwezi kuwa na kila kitu.”
“Maybe. Lakini unaweza kujua tradeoff kabla ya kuificha kwenye metric.”
Karanja hakujibu, lakini hakupinga interim finding.
Uamuzi wa kutofuta fraud review yote ulikuwa muhimu kwa Wema. Angeweza kupata applause kwa kusema system yote ni corrupt. Evidence haikusema hivyo. Control objective ya kupunguza fraud ilikuwa legitimate; implementation ndiyo haikuwa fair.
Huo distinction ndiyo iliingia kwenye finding ya Grace na kuifanya remedy iwe possible bila kuharibu fund.
Baada ya toggle kuzimwa, IT lead ali-run control na adverse cases mara ya pili ili kuhakikisha change haikuwa cosmetic. Cases zote zilibaki na risk labels zao, lakini hakuna essential service iliyofungwa automatic. Manual queue count iliongezeka. Karanja akaonyesha screen na kusema, “Hii ndiyo backlog niliyokuwa naogopa.” Wema hakupuuza. Aliomba count ihifadhiwe ili redesign ipimwe pia kwa speed na fairness. Grace akaongeza metric mbili kwenye interim plan: median review time na wrongful-service interruption. Kwa mara ya kwanza, success haingepimwa kwa “misuse reduced” pekee. Uamuzi huo uliweka gharama ya reform wazi: staff zaidi na review polepole, lakini pia fewer punishments without context.
IT lead pia aliweka change ticket yenye rollback plan, kwa sababu temporary halt ingeweza kuleta unexpected technical effects. Wema alipenda hilo; reform yenyewe ilipaswa kuwa auditable. Ticket ilitaja nani aliidhinisha, timestamp, modules zilizotenganishwa na muda wa review. Grace akasema monitoring team ingerudi baada ya wiki kuangalia kama toggle haijarudishwa kimya. Kwa Wema, hiyo follow-up ilikuwa muhimu kuliko applause ya room. Uamuzi ulikuwa irreversible kwa sababu sasa kulikuwa na public institutional record ya kwa nini auto-sanctions zilisitishwa.
Na saa 17:26, toggle ya auto-sanction ilizimwa rasmi.