The building forgets. Symbious remembers.
A building runs on judgments a person makes and no sensor catches — this is clean, this is released, this is safe — that live twenty seconds in a head and then vanish. These studies read one building type at a time as the set of thresholds where that memory is made, and show what changes when it is witnessed instead of forgotten.
A few ideas carry all the studies. They live here so each study can stay lean — a map and its value, nothing repeated.
Not spatial geometry, not surveillance — the operational state of a place, captured selectively by digital infrastructure.
A record made at the threshold, at the moment, by the person who judged it — append-only and tamper-evident. Think of a footprint set in stone rather than one the tide erases: the instant someone stood there is kept, not washed away. Events, not people.
Ten unamendable prohibitions, published to the public domain (CC0). The constitutional constraint against the surveillance model.
They look adjacent; they are opposites. Surveillance watches people who never asked to be watched — it infers, tracks presence, and builds a record about a person. Witnessing is the reverse: a person's own deliberate confirmation of a condition — a role attesting a threshold, chosen and made in the moment. No camera, no presence-tracking, no profile; nothing is captured that the person didn't choose to attest. The record is of the event: it holds no name, no account and no device, because the schema has no field for them.
Anonymity is a property of the threshold, not only of the schema. Where many people pass — a lobby, a street, a shared service corridor — the absence of an identifier is decisive: nothing can be inferred from a record any of a hundred people could have made. Where one person covers one threshold on one route, the record is attributable by anyone who knows the rota, whether or not a name was ever stored.
Two things follow, and both are design rules rather than caveats. Where a threshold is solitary, the record should be indexed on the object or the place — a lift's own service history, a hide's own provenance — rather than on a person's shift. And where that is not possible, the protection is contractual and constitutional rather than physical, and should be described that way to the people it concerns. A record that is safer than the people making it believe is not a foundation to build on.
Across every vertical, the catastrophe is rarely the automation — it's a human threshold that was someone's job, often seen, but never recorded, escalated or acted on. These are public events, summarised from published inquiries and reporting; read the sources rather than these lines.
| Vertical | The unwitnessed threshold | Study |
|---|---|---|
| Mall | Sampoong 1995 — cracks seen that morning, not escalated | studies → |
| Franchise | Chipotle 2015 — traceability collapsed across the supply chain | studies → |
| Beverage | Mislabelled packaging & allergen changeover recalls — the release was claimed, not witnessed | production → |
| Office / tower | Grenfell 2017 — a broken golden thread of building information | supertall → |
| Harbour | Beirut 2020 — hazardous material stored and flagged for years without action | studies → |
| Hotel | Cooling-tower / water-system maintenance lapse | hotel → |
| Home / DPP | Provenance a claim on a swing-tag, lost at resale | home → |
Each links to its own study. Six live; the rest ship as they're drawn.
Thresholds many people pass — where the record is anonymous by structure, not by promise.
Here the record belongs to the thing, not to the route or the shift — its own history, travelling with it across the hands it passes through.
Every study follows the same spine — only the map, the thresholds, the value and the questions change per vertical.
Symbious doesn't replace the CAFM, CMMS, HACCP plan or safety-management system a building already runs. It's the verified-capture layer they assume but never guarantee. It fixes the input — the weak link — with a witnessed, tamper-evident record that stays portable across handover, and feeds the systems you already run. Not another system of record — the witnessed one beneath them.
Nor does it replace sensing. Temperature, occupancy, energy and vibration are measured better by instruments that never tire. Symbious holds the judgments no sensor can make — this is safe, this is released, this is ready — and nothing else.
The thesis, the governance and the reference schemas are published and citable — three position papers and the schemas under CC BY 4.0, the Concordat under CC0.
These studies exist to be pulled apart. If a placement looks wrong, a value overstated, or a threshold missed — say so; each study carries its own questionnaire. And if a building of yours fits, from design phase to in-use, a pilot is a few nodes, one zone, ninety days.
Read a study and use its form, request a pilot →, or write to ping@symbious.io.