SETU Ram Rajya Mission
Trust

Safeguards & Red Lines

The more capable a local system becomes, the more it needs protection against capture, discrimination, surveillance, corruption and arbitrary authority. Safeguards are not an appendix here.

Principles

Twelve governance principles

  1. Constitutional and legal supremacy. Units supplement statutory institutions. They never override them.
  2. Equal access. No service depends on caste, religion, language, gender, political affiliation, wealth or personal connection.
  3. Subsidiarity. Solve at the lowest genuinely competent level; escalate the moment expertise, scale, rights or safety require it.
  4. Data minimisation. Collect only what a defined service requires, and delete it when the service ends.
  5. Due process. Any sanction, exclusion or referral follows published rules and allows review.
  6. Professional boundaries. Volunteers complement doctors, police, engineers, counsellors, teachers and social workers. They never impersonate them.
  7. Financial transparency. Residents can see where local money went, to the rupee, without asking.
  8. Independent audit and grievance. Neither run by the people being audited.
  9. Accessibility. Multilingual, voice-capable, low-bandwidth, and never digital-only.
  10. Outcome evaluation. Judged on what changed for residents, not on expenditure or publicity.
  11. Reversibility. Every charter expires in five years unless residents renew it.
  12. Publish the failures. Including this one, when it happens.
Permanent prohibitions

Things this system will never do

Seven horizontal red bars of equal weight on warm off-white, each with a crossed-out pictogram at its left end: a police cap, an eye, a caste or religion tag, an algorithm chip, a data-sale price tag, a pressured figure, and a conditional gate.
Written as permanent, not as a current setting an administrator could adjust.

These are not current settings that a future administrator could adjust. They are written as permanent, and a unit that crosses one has failed by definition.

  • Hold any power of policing, enforcement, detention, inspection or patrol.
  • Monitor belief, speech, politics, scholarship or satire. Only credible threats and unlawful conduct, referred to the competent authority under due process.
  • Record anyone’s caste, religion, political affiliation, diet or sexual orientation.
  • Let an algorithm decide eligibility, exclusion, benefit or priority. People decide; software may only assist with language, search and drafting.
  • Sell, trade, share commercially or politically target resident data.
  • Pressure a survivor of violence or abuse to reconcile, mediate, or explain themselves.
  • Make any service conditional on contribution, faith, diet, occupation or participation in any programme.
  • Keep a register of who is poor, addicted, indebted, ill, disabled, bereaved or in recovery.
  • Name, shame, parade or publicly pledge any resident.
  • Allow volunteers to displace paid workers, or students to replace trained professionals.
Privacy architecture

Designed so a critic can verify it

A field of many small unit circles each containing its own data mark, with a large dotted outline of a central repository above them crossed out in red, and thin lines rising from the units carrying only simplified summary shapes.
There is no national table of residents to leak, subpoena or repurpose, because it does not exist.

No central resident database

Data lives only in the unit’s own encrypted store. Nothing moves upward except anonymous aggregates. There is no national table of residents to be leaked, subpoenaed, sold or repurposed, because it does not exist.

A public Data Register

Every field collected, the service that justifies it, who may read it, and the date it is deleted — published as an ordinary page anyone can check, including people who do not trust the unit.

Access logging

Every read of a resident’s record is logged and visible to that resident. A volunteer cannot look someone up out of curiosity without it being seen.

An ombudsman above the unit

A Privacy Ombudsman at Sangam level, independent of the units they oversee, with the power to inspect, order deletion and trigger a failure review.

Risk

Risk and response

A large field of identical small figure icons from which twenty-five are drawn at random and lifted into a ring above, the selected ones in saffron and visibly scattered across the whole field rather than clustered.
Audits catch theft afterwards. Sortition changes who decides in the first place.
RiskDesign response
Local elite captureCitizens’ Jury by sortition, stratified and rotated. 20% participatory budgeting. Recall by 15% of households. Two-key approval. Conflict-of-interest declarations. Independent audit.
Poor units fall behindState matching, national equalisation, and a guaranteed service floor independent of local wealth.
Support becomes surveillanceNo central database, a public Data Register, access logs, deletion rules, an independent ombudsman, and no caste, religion or political fields.
Volunteers displace paid jobsVolunteer roles narrowly defined. Anything on the paid exchange can never be requested as a favour.
Informal mediation hides abuseViolence, abuse and coercion removed from community handling entirely. Mandatory professional and legal referral.
Harmony work becomes censorshipNarrow focus on unlawful conduct only. Transparent definitions, appeal rights, judicial oversight, no power over lawful expression.
Safety work becomes vigilantismPermanent prohibition on enforcement of any kind. Observation and referral only, with the authority’s failure made publicly visible instead.
Students become free labourVoluntary, age-limited, supervised, insured, with a published list of work students may never be given.
A rigid central curriculum returns digitallyModular choice, multiple providers, local mentoring, transparent standards, portable credit.
Research openness leaks sensitive workTiered research-security and intellectual-property policy rather than blanket secrecy or blanket openness.
Tradition treated as unquestionable, or worthlessPrimary-source scholarship plus transparent empirical testing, with the four evidence labels applied to every claim.
The unit itself failsPublished triggers, fund frozen, temporary administrator, fresh jury within 90 days, and the national service floor continuing throughout.
Failure

What happens when a unit stops working

A flow diagram from a failure trigger through a frozen fund icon, a temporary administrator icon and a fresh selection icon, with an unbroken green baseline bar running underneath the entire flow.
The unbroken green line is the guaranteed service floor. It does not stop, whatever else does.

No part of the original concept described its own failure. A model that cannot is not finished.

Triggers

  • A failed or adverse audit
  • A finding of discrimination in service delivery
  • Sustained breach of service standards without escalation
  • Misuse or unexplained loss of fund money
  • A privacy finding upheld by the ombudsman
  • Failure to constitute a jury on schedule

Consequence

  • The fund is frozen immediately
  • A temporary administrator is appointed by the state
  • A fresh jury is selected within 90 days
  • The finding and the remedy are published
  • Repeated failure ends the charter and returns assets to the local body
The floor that never moves

Throughout any failure, suspension or dissolution, every resident keeps a guaranteed right to emergency food, temporary shelter, sanitation, help with documents and referral to specialist care — regardless of whether their unit is functioning at all. A person must never be worse off because the institution around them collapsed.