ERRORPROPAGATION-001™
The SAFECHAIN™ Institutional Error Propagation, Record Contamination & Downstream Decision Harm Framework™
Framework Reference: ERRORPROPAGATION-001™
Framework Type: Institutional Safeguarding, Information Integrity, Record Governance, Error Propagation, Decision Integrity, Correction Architecture, Downstream Harm, Institutional Accountability, Assurance & Systems Reform
Parent Architecture: SAFECHAIN™ Integrated Safeguarding Architecture Map™
Primary Lifecycle Stages: Signal → Recognition → Risk → Decision → Response → Protection → Assurance → Learning
Cross-Cutting Domain: Evidence, Information, Record & Decision Integrity
Related Frameworks: INFORMATIONASYMMETRY-001™, NARRATIVELOCK-001™, CORRECTIONINTEGRITY-001™, EVIDENCEINTEGRITY-001™, CONTEXTINTEGRITY-001™, ASSERTIONPROVENANCE-001™, NARRATIVEADVANTAGE-001™, CONTRADICTIONINTEGRITY-001™, UNCERTAINTYINTEGRITY-001™, CLEANSLATE-001™, BURDENCORRECTION-001™, CONNECTIVITYDEFICIT-001™, INSTITUTIONALFRAGMENTATION-001™, PARTICIPATIONINTEGRITY-001™, DECISIONDRIFT-001™, PROTECTIVEBURDEN-001™, PROTECTIVEASSURANCE-001™
Version: 1.0
Year: 2026
Author: Samantha Avril-Andreassen, LLB (Hons), LLM, LPC, FRSA
Organisation: SAFECHAINN Ltd / SAFECHAIN™
1. Purpose
The SAFECHAIN™ Institutional Error Propagation, Record Contamination & Downstream Decision Harm Framework™ — ERRORPROPAGATION-001™ establishes a governance architecture for identifying, tracing, containing, correcting and learning from material errors that move through institutional systems.
An institutional error rarely remains where it began.
An inaccurate date may enter a record.
An allegation may lose its evidential status.
A professional interpretation may be copied as fact.
A contextual qualification may disappear from a summary.
A corrected record may continue circulating in its original form.
A referral may transmit the error to another agency.
A later professional may reasonably rely upon the earlier record.
A decision may then be made upon information whose original weakness is no longer visible.
The central safeguarding problem is therefore not simply:
Was an error made?
It is:
Where did the error travel, what did it change, who relied upon it, what consequences followed, and has the entire error pathway been repaired?
2. Core Vulnerability
A single institutional error can acquire increasing authority as it moves through records, professionals, agencies and decisions, creating consequences far beyond the point at which the original error occurred.
3. Core Question
When materially inaccurate, incomplete, misclassified or contextually distorted information enters an institutional system, can the institution identify how far it travelled, what decisions relied upon it, what harm followed and what must be repaired?
4. Governing Proposition
Correction of the originating record is insufficient where a material error has already propagated into other records, assessments, decisions, agencies or protective actions. Institutional correction should extend proportionately across the downstream consequences created by the error.
5. Core Architecture
Error → Record → Replication → Transmission → Reliance → Decision → Consequence → Detection → Containment → Correction → Propagation Repair → Decision Reassessment → Verification
6. Expanded Architecture
Information → Error Introduction → Evidential Status → Record Entry → Replication → Summary → Transfer → Professional Adoption → Cross-System Transmission → Institutional Reliance → Decision Dependency → Protective Consequence → Error Detection → Provenance Trace → Propagation Mapping → Containment → Source Correction → Downstream Correction → Decision Reassessment → Protective Repair → Verification → Learning
7. Institutional Error™
Defined as:
Materially inaccurate, incomplete, misclassified, misattributed, outdated or contextually distorted information contained within or relied upon by an institutional system.
8. Error Propagation™
Defined as:
The movement, reproduction, adoption or consequential use of an institutional error beyond the record, decision or process in which it originated.
9. Record Contamination™
Defined as:
The condition created when materially erroneous information enters one or more institutional records and subsequently influences the interpretation or reliability of connected information.
10. Downstream Decision Harm™
Defined as:
Adverse safeguarding, procedural, protective or institutional consequences arising wholly or partly because a decision relied upon propagated erroneous information.
11. Error Pathway™
Origin → Recording → Replication → Transmission → Reliance → Consequence
12. Error Footprint™
Defined as:
The total identifiable institutional reach of an error, including records, systems, professionals, agencies, assessments, decisions and actions materially affected by it.
13. Error Radius™
Defined as:
The breadth of institutional systems potentially affected by a propagated error.
14. Error Depth™
Defined as:
The extent to which an error has moved from simple recording into increasingly consequential institutional reasoning and decision-making.
15. Core Distinction
Error Corrected at Source ≠ Error Corrected Across the System
16. Critical Distinctions
Original Error ≠ Downstream Error
Incorrect Record ≠ Isolated Record
Correction Entered ≠ Correction Propagated
Correction Propagated ≠ Consequence Repaired
Record Amendment ≠ Decision Reassessment
Repeated Information ≠ Independent Confirmation
Institutional Repetition ≠ Increased Accuracy
Professional Reliance ≠ Source Verification
Good-Faith Reliance ≠ Harmless Reliance
Historical Error ≠ Historical Consequence Only
Information Deleted ≠ Institutional Understanding Corrected
Corrected Narrative ≠ Corrected Decision
Correction Notification ≠ Correction Receipt
Correction Receipt ≠ Correction Implementation
Record Accuracy ≠ Decision Integrity
No Intent to Mislead ≠ No Propagation Risk
Administrative Error ≠ Administratively Contained Harm
Local Correction ≠ Systemic Repair
17. SAFECHAIN™ Propagation Principle™
The institutional significance of an error should be assessed not only by the error itself, but by the number, importance and consequence of the systems, decisions and protective actions through which it has travelled.
18. Error Origin™
Potential origins include:
incorrect data entry;
inaccurate account;
misunderstood communication;
professional interpretation;
incomplete record;
missing context;
misattribution;
outdated information;
mistaken identity;
inaccurate chronology;
technical error;
transcription;
automated data transfer;
copied historical record;
unsupported inference;
incorrect evidential classification.
19. Error Origin Classification™
EO1 — Factual Error™
Objectively inaccurate information.
EO2 — Attribution Error™
Information attributed to the wrong source or person.
EO3 — Context Error™
Information materially distorted through missing context.
EO4 — Status Error™
Allegation, inference or opinion represented with an inaccurate evidential status.
EO5 — Chronology Error™
Incorrect timing or sequencing.
EO6 — Identity Error™
Information attached to the wrong person, case or entity.
EO7 — Interpretation Error™
Materially unsupported or inaccurate institutional interpretation.
EO8 — Omission Error™
Material information absent from the record.
EO9 — Currency Error™
Outdated information relied upon as current.
EO10 — Transfer Error™
Information altered during movement between systems.
EO11 — Technical Error™
Technology creates or reproduces inaccurate information.
EO12 — Correction Failure Error™
Previously corrected information reappears or continues circulating.
20. Error Materiality™
Not every error requires the same response.
Materiality depends upon:
relevance to risk;
relevance to credibility;
decision reliance;
protective consequence;
recurrence;
propagation;
duration;
affected population;
difficulty of correction.
21. Error Materiality Levels™
EM1 — Immaterial™
No reasonable decision or protective consequence.
EM2 — Limited™
Minor institutional consequence.
EM3 — Material™
Capable of affecting assessment, participation or decision.
EM4 — Serious™
Significant decision or protective consequence.
EM5 — Critical™
Error materially contributes to serious safeguarding failure, major rights impact or systemic decision distortion.
22. Error Propagation Stages™
EP0 — Origin™
Error created.
EP1 — Recorded™
Error enters formal record.
EP2 — Replicated™
Error copied elsewhere.
EP3 — Transmitted™
Error crosses team, system or institutional boundary.
EP4 — Adopted™
Professional or institution relies upon it.
EP5 — Decision-Embedded™
Error influences decision.
EP6 — Consequence-Embedded™
Decision produces material downstream consequence.
23. Propagation Severity™
Propagation severity should reflect both:
Error Materiality × Propagation Depth
A modest error replicated widely may require significant correction.
A highly material error affecting one critical decision may require equally urgent action.
24. Record Replication™
Defined as:
The copying, summarisation, extraction or transfer of information from one institutional record into another.
25. Replication Integrity™
Every replication should preserve, where materially relevant:
source;
status;
context;
date;
uncertainty;
dispute;
correction status.
26. Error Multiplication™
One Error → Multiple Records → Multiple Apparent Sources → Increased Institutional Authority
27. Error Authority Inflation™
Defined as:
The increase in perceived reliability of erroneous information because it appears repeatedly across institutional records or professional documents.
28. Institutional Echo Error™
Defined as:
An error repeated through institutional records until later users reasonably but incorrectly perceive it as independently established information.
29. False Corroboration Through Propagation™
Multiple records may appear to confirm the same information while all deriving from one erroneous source.
Therefore:
Number of Records ≠ Number of Independent Sources
30. Error Provenance™
Institutions should be able to determine:
where the information originated;
when it entered;
who recorded it;
original evidential status;
subsequent copies;
later modifications;
decisions relying upon it.
Relevant framework:
ASSERTIONPROVENANCE-001™
31. Provenance Break™
Defined as:
A point in the propagation pathway at which the origin or evidential status of information can no longer readily be determined.
32. Propagation Blind Spot™
Defined as:
A location within an institutional information system where error transmission cannot readily be identified, traced or corrected.
33. Error Transmission™
Errors may move:
Vertically
Frontline → Management → Governance.
Horizontally
Team → Team.
Externally
Institution → Institution.
Temporally
Historic Record → Future Decision.
Digitally
System → System.
34. Vertical Error Propagation™
An error may become progressively simplified as it moves upward through institutional reporting.
35. Horizontal Error Propagation™
An error may spread across departments while appearing independently recorded.
36. Cross-Institutional Error Propagation™
An error may move between:
police;
courts;
healthcare;
housing;
education;
local authorities;
charities;
employers;
regulators;
other safeguarding institutions.
37. Temporal Error Propagation™
Defined as:
The persistence of erroneous information across time such that historic error influences later institutional understanding or decisions.
38. Legacy Error™
Defined as:
A historic error that remains operationally influential because it continues to appear in institutional records or reasoning.
39. Dormant Error™
An error may remain inactive until a later process retrieves and relies upon it.
40. Reactivated Error™
Defined as:
A historic institutional error that acquires renewed consequence when retrieved or relied upon in a later decision.
41. Error Persistence™
Original Error → Archived Record → Future Retrieval → Renewed Reliance
42. Decision Dependency™
A decision may depend:
minimally;
partially;
materially;
primarily;
determinatively
upon erroneous information.
43. Error Reliance Classification™
ER1 — Incidental™
Error present but not materially relied upon.
ER2 — Relevant™
Error contributed modestly.
ER3 — Material™
Error materially influenced reasoning.
ER4 — Primary™
Error was a major basis of decision.
ER5 — Determinative™
Decision substantially depended upon the erroneous information.
44. Reliance Integrity™
Once an error is verified, institutions should determine:
Which decisions relied upon it and to what degree?
45. Error-Decision Dependency Map™
Error → Assessment → Decision → Action → Consequence
46. Downstream Decision Contamination™
Defined as:
The impairment of decision integrity caused by material reliance upon propagated erroneous information.
47. Decision Contamination Does Not Automatically Mean Decision Invalidity™
The framework does not presume that every decision containing erroneous information must change.
It requires examination of:
materiality;
reliance;
independent evidence;
consequence;
counterfactual.
48. Error Counterfactual™
Ask:
If the error had not existed, would the decision reasonably have required different consideration?
49. Clean-Record Counterfactual™
Ask:
If the decision-maker had received the corrected record from the beginning, might the decision pathway reasonably have differed?
50. Independent-Evidence Counterfactual™
Ask:
After removing all records derived from the erroneous source, what independent evidential basis remains for the conclusion?
51. Protective Consequence Analysis™
Error propagation may affect:
risk classification;
credibility;
service access;
referral;
housing;
healthcare;
child safeguarding;
policing;
protective orders;
safety planning;
financial support;
escalation;
closure.
52. Error-Induced Protection Gap™
Defined as:
A gap in safeguarding protection created or materially worsened because erroneous information affected institutional recognition, decision or response.
53. Error-Induced Protective Burden™
Defined as:
Additional protective or procedural work imposed upon the affected person because they must overcome consequences created by institutional error.
54. Error-Induced Participation Burden™
The person may have to:
locate records;
identify inconsistencies;
prove inaccuracies;
obtain documents;
repeat corrections;
contact multiple agencies;
reconstruct chronology;
explain downstream consequences.
Relevant framework:
BURDENCORRECTION-001™
55. Institutional Error Debt™
Defined as:
The accumulating correction, reassessment and remediation obligations created when institutional errors remain unresolved while continuing to generate downstream consequences.
56. Error Debt Accumulation™
Uncorrected Error → Additional Records → Additional Reliance → Additional Decisions → Increasing Repair Burden
57. Error Propagation Velocity™
Defined as:
The speed at which erroneous information moves through institutional systems after originating.
High propagation velocity may occur through:
automated systems;
shared databases;
urgent referrals;
standardised summaries;
multi-agency communication.
58. Error Propagation Reach™
Defined as:
The number and significance of people, records, teams, institutions or decisions exposed to an error.
59. Error Persistence Duration™
The period during which erroneous information remains institutionally active.
60. Error Amplification™
Defined as:
The process by which the institutional significance or apparent reliability of an error increases as it moves through systems.
61. Error Mutation™
Defined as:
A change in the wording, meaning, confidence or implication of erroneous information during transmission.
Example:
“Reported that…” → “Records indicate…” → “It is established that…”
62. Error Mutation Risk™
The error may become harder to correct because the later version no longer resembles the original assertion.
63. Context-Stripping Propagation™
Defined as:
The transmission of information without contextual qualifications necessary for accurate interpretation.
Relevant framework:
CONTEXTINTEGRITY-001™
64. Status-Stripping Propagation™
Defined as:
The transmission of information without preserving whether it was allegation, report, inference, professional opinion, dispute or verified fact.
65. Dispute-Stripping Propagation™
Defined as:
The transmission of information while omitting that its accuracy or interpretation has been materially challenged.
66. Correction-Stripping Propagation™
Defined as:
The continued transmission of original information without accompanying verified correction or qualification.
67. Error Containment™
Defined as:
Immediate action intended to prevent a known or suspected material error from generating further institutional reliance while its extent and consequences are assessed.
68. Error Containment Architecture™
Detection → Flag → Reliance Warning → Transmission Control → Investigation → Correction
69. Material Error Flag™
Where appropriate, a material record should indicate:
error suspected / verified;
information affected;
date identified;
correction status;
decision impact under review.
70. No-Further-Reliance Principle™
Where information is known to contain a material error, institutions should not continue relying upon the erroneous element merely because formal correction processes remain incomplete.
71. Error Detection Sources™
Errors may be identified through:
survivor challenge;
practitioner review;
audit;
complaint;
contradictory evidence;
new documents;
data reconciliation;
professional challenge;
judicial or regulatory findings;
system alerts;
multi-agency comparison.
72. Error Detection Integrity™
The institution should provide realistic routes through which errors can be:
reported;
investigated;
recorded;
corrected;
escalated.
73. Error Notification™
Where materially appropriate, relevant owners should be informed that information upon which they may rely is under correction or review.
74. Propagation Mapping™
Once a material error is verified, identify:
Where Has It Travelled?
Map:
original record;
duplicates;
summaries;
assessments;
reports;
referrals;
external disclosures;
decisions;
protective actions.
75. SAFECHAIN™ Error Propagation Map™
Minimum fields:
Error:
Original Record:
Origin Date:
Error Type:
Materiality:
Copied Records:
Internal Recipients:
External Recipients:
Decisions Affected:
Protective Consequences:
Correction Status:
Reassessment Status:
Owner:
76. Error Propagation Chain™
Origin → Copies → Recipients → Reliance → Decisions → Consequences
Every link should be tested.
77. Propagation Boundary™
Defined as:
The furthest identifiable point reached by an error within connected institutional systems.
Correction planning should seek to identify this boundary.
78. Unknown Propagation Risk™
Where the full error footprint cannot be determined, uncertainty should remain explicit.
79. Correction Architecture™
Source Correction → Copy Correction → Recipient Notification → Decision Reassessment → Protective Repair → Verification
80. Source Correction™
Correct or appropriately annotate the originating record.
81. Downstream Correction™
Correct or appropriately annotate material records derived from the original error.
82. Cross-Institutional Correction™
Where error was transmitted externally, relevant recipient institutions may require notification consistent with applicable legal and information-governance requirements.
83. Correction Propagation™
Defined as:
The controlled transmission of verified corrective information across the institutional pathway previously travelled by erroneous information.
84. Correction Velocity™
Defined as:
The speed with which verified corrective information reaches materially affected institutional points.
85. Error–Correction Velocity Gap™
Error Propagation Speed – Correction Propagation Speed
A large gap creates continuing exposure.
86. Correction Reach Integrity™
Ask:
Has the correction travelled at least as far as the material error?
87. Correction Depth Integrity™
Ask:
Has the correction reached not only records but the decisions and consequences produced by those records?
88. Correction Symmetry Principle™
The correction architecture should be proportionate to the propagation architecture of the error.
89. No-Local-Correction Principle™
A material error that has travelled beyond its originating record cannot be considered fully repaired solely because the originating record has been corrected.
90. Decision Reassessment™
Where a corrected error materially influenced a decision, institutions should determine whether reassessment is required.
91. Decision Reassessment Trigger™
Potential triggers include:
ER3 Material reliance;
ER4 Primary reliance;
ER5 Determinative reliance;
serious protective consequence;
significant credibility impact;
significant risk classification impact;
closure based upon erroneous information.
92. Protective Repair™
Defined as:
Corrective safeguarding action required where propagated error has caused, prolonged or materially contributed to inadequate protection.
93. Protective Repair Architecture™
Correct Information → Revised Risk → Revised Decision → Revised Protection → Verification
94. Consequence Repair™
Some consequences may require action beyond record correction.
Examples include:
reassessment;
renewed referral;
restoration of service;
revised safeguarding plan;
re-escalation;
new decision;
correction notification;
governance review.
95. Correction Closure™
A correction should close only when:
source is addressed;
material copies are addressed;
recipients are considered;
dependent decisions are reviewed;
protective consequences are considered;
completion is verified.
96. Error Reappearance™
Defined as:
The recurrence of previously corrected erroneous information within institutional systems.
97. Zombie Error™
Defined as:
A previously corrected institutional error that re-enters active records or decision-making because an uncorrected copy survives elsewhere in the system.
98. Zombie Error Test™
Ask:
Could an old copy of this error re-enter future decision-making?
99. Correction Durability™
Institutions should ensure corrections survive:
staff turnover;
system migration;
handover;
archival retrieval;
external information exchange.
100. Error Recurrence™
Repeated errors of the same type may indicate:
poor system design;
weak training;
template failure;
automation failure;
governance weakness;
cultural practice.
101. Systemic Error Propagation™
Defined as:
A recurring organisational condition in which institutional design enables errors to spread, acquire authority or resist correction.
102. Systemic Record Contamination™
Occurs where multiple records or cases are affected by a common error-generating process.
103. Systemic Correction Failure™
Occurs where institutional correction mechanisms repeatedly fail to reach downstream consequences.
104. Error Propagation Failure Taxonomy™
EPF1 — Origin Control Failure™
Error introduced without detection.
EPF2 — Status Preservation Failure™
Evidential status lost.
EPF3 — Context Preservation Failure™
Material context lost.
EPF4 — Provenance Failure™
Original source lost.
EPF5 — Replication Failure™
Error copied without verification.
EPF6 — Transmission Failure™
Error transferred across institutional boundary.
EPF7 — Reliance Failure™
Material reliance without adequate source checking.
EPF8 — Detection Failure™
Error not identified despite available indicators.
EPF9 — Containment Failure™
Known error continues spreading.
EPF10 — Source Correction Failure™
Origin remains inaccurate.
EPF11 — Downstream Correction Failure™
Copies remain inaccurate.
EPF12 — Decision Reassessment Failure™
Affected decision not reconsidered.
EPF13 — Protective Repair Failure™
Safeguarding consequence remains unresolved.
EPF14 — Verification Failure™
Institution cannot demonstrate complete repair.
105. Error Propagation Failure Severity™
EPFS1 — Minimal
EPFS2 — Limited
EPFS3 — Material
EPFS4 — Serious
EPFS5 — Critical
106. Root Causes™
EPRC1 — Poor Record Design
EPRC2 — Copy-and-Paste Practice
EPRC3 — Provenance Loss
EPRC4 — Evidential Status Loss
EPRC5 — Context Loss
EPRC6 — Weak Verification
EPRC7 — Information Fragmentation
EPRC8 — Correction Architecture Failure
EPRC9 — Technology Failure
EPRC10 — Handover Failure
EPRC11 — Professional Culture
EPRC12 — Governance Failure
107. Error Propagation Register™
Records:
error;
source;
type;
materiality;
propagation stage;
recipients;
reliance;
consequence;
containment;
correction;
verification.
108. Error Dependency Register™
Records decisions materially dependent upon affected information.
109. Error Correction Register™
Tracks correction actions and owners.
110. Correction Propagation Register™
Tracks whether corrective information reached every material downstream location.
111. Zombie Error Register™
Tracks known surviving copies capable of reintroducing corrected information.
112. Error Remediation Register™
Error → Root Cause → Corrective Action → Owner → Deadline → Evidence → Retest → Closure
113. Metrics™
Potential measures include:
Material Error Rate™
Error Propagation Rate™
Cross-Institutional Error Rate™
Error Detection Time™
Error Containment Time™
Correction Propagation Rate™
Correction Velocity™
Error–Correction Velocity Gap™
Decision Reassessment Rate™
Protective Repair Rate™
Zombie Error Rate™
Repeat Error Propagation Rate™
Complete Error Repair Rate™
114. Error Propagation Rate™
Measures the proportion of material errors travelling beyond their point of origin.
115. Correction Propagation Rate™
Measures the proportion of material affected records and recipients reached by verified correction.
116. Complete Error Repair Rate™
Measures cases in which:
Source + Downstream Records + Decisions + Protective Consequences
have all been appropriately addressed.
117. Error Propagation Gates™
Gate 1 — Error Gate™
What is inaccurate?
Gate 2 — Materiality Gate™
Does it matter?
Gate 3 — Origin Gate™
Where did it begin?
Gate 4 — Provenance Gate™
Can its pathway be traced?
Gate 5 — Replication Gate™
Where was it copied?
Gate 6 — Transmission Gate™
Where was it sent?
Gate 7 — Reliance Gate™
Who relied upon it?
Gate 8 — Decision Gate™
Which decisions were affected?
Gate 9 — Protection Gate™
What protective consequences followed?
Gate 10 — Containment Gate™
Has further propagation stopped?
Gate 11 — Correction Gate™
Has the source been corrected?
Gate 12 — Propagation Repair Gate™
Have downstream records been addressed?
Gate 13 — Reassessment Gate™
Do decisions require reconsideration?
Gate 14 — Durability Gate™
Could the error reappear?
Gate 15 — Assurance Gate™
Can complete repair be demonstrated?
118. Stress Tests™
ST1 — One-to-Ten Record Test™
One error appears in ten later records.
Can all ten be identified?
ST2 — Cross-Agency Test™
The error has been transmitted to three external institutions.
Can correction follow it?
ST3 — Source Removal Test™
Remove the original erroneous source.
Which later conclusions still depend upon it?
ST4 — Correction Test™
Correct the original record.
Does every downstream system change?
ST5 — Decision Test™
A significant decision relied materially upon the error.
Is reassessment triggered?
ST6 — Archive Test™
The error exists in an archived record.
Can it reappear?
ST7 — Staff Handover Test™
A new practitioner inherits the case.
Do they receive the correction?
ST8 — System Migration Test™
Records move to a new platform.
Does correction status survive?
ST9 — False Corroboration Test™
Five records repeat one erroneous source.
Can institutional echo be identified?
ST10 — Context Test™
The underlying words are accurate but material context is missing.
Can contextual error be detected?
ST11 — Survivor Stops Correcting Test™
If the affected person stops repeatedly identifying the error, does institutional correction continue?
ST12 — Future Decision Test™
Five years later, could an old erroneous copy influence a new decision?
119. Error Propagation Counterfactual™
If the original error had never entered the institutional system, which later records, assessments, decisions or protective consequences would reasonably have developed differently?
120. Earlier Detection Counterfactual™
What downstream consequences might have been prevented if the error had been identified at the earliest reasonable opportunity?
121. Correction Propagation Counterfactual™
If the verified correction had travelled through the system as quickly and widely as the original error, what consequences might have been different?
122. Survivor Burden Counterfactual™
Would the institutional error have remained uncorrected if the affected person had stopped pursuing correction?
123. Whole-System Error Counterfactual™
Could every professional have acted reasonably on the information available to them while the combined institutional system nevertheless produced an unreasonable outcome because the underlying information was wrong?
124. Error Propagation Integrity Levels™
EPI1 — Uncontrolled™
Errors can propagate without traceability.
EPI2 — Reactive™
Correction occurs primarily after external challenge.
EPI3 — Traceable™
Material errors can be identified and mapped.
EPI4 — Controlled™
Propagation, correction and decision reassessment are systematically governed.
EPI5 — Preventive, Corrective & Assured™
Errors are detected early, propagation is contained, downstream consequences are repaired and effectiveness is independently verified.
125. Implementation Architecture™
Implementation should establish:
error-reporting mechanisms;
materiality assessment;
error flags;
provenance tracing;
propagation mapping;
containment procedures;
correction ownership;
recipient notification;
decision dependency review;
protective consequence review;
correction verification;
recurrence monitoring.
126. Error Response Protocol™
Report → Triage → Materiality → Contain → Trace → Correct → Notify → Reassess → Repair → Verify → Learn
127. Error Response Ownership™
Every material error should have an identifiable:
Error Owner™
responsible for coordinating correction across the full propagation pathway.
128. Error Owner™
The Error Owner™ should not merely correct the originating record.
They should determine:
where error travelled;
who relied upon it;
what decisions were affected;
what correction is required;
whether protective repair is required;
whether correction is complete.
129. Critical Error Escalation™
EM5 errors should trigger senior safeguarding or governance oversight proportionate to potential consequence.
130. Error Audit Protocol™
Institutional audit should sample material errors and reconstruct:
Origin → Propagation → Reliance → Consequence → Correction → Verification
131. Reverse Error Audit™
Begin with a material decision and trace information backwards.
Ask:
what information supported the decision?
where did it originate?
was it independently verified?
was it disputed?
had it been corrected elsewhere?
were derived records mistaken for independent evidence?
132. Forward Error Audit™
Begin with a known material error and trace forward.
Ask:
where did it travel?
who received it?
who relied upon it?
what decisions followed?
where did correction reach?
where did correction stop?
133. Error Audit Domains™
Domain 1 — Origin Integrity
Domain 2 — Provenance Integrity
Domain 3 — Status Integrity
Domain 4 — Context Integrity
Domain 5 — Replication Integrity
Domain 6 — Transmission Integrity
Domain 7 — Reliance Integrity
Domain 8 — Detection Integrity
Domain 9 — Containment Integrity
Domain 10 — Correction Integrity
Domain 11 — Decision Reassessment Integrity
Domain 12 — Protective Repair Integrity
Domain 13 — Correction Durability
Domain 14 — Assurance & Learning
134. Audit Scoring™
Each domain:
0 — Absent
1 — Weak
2 — Developing
3 — Functional
4 — Strong
5 — Assured
Maximum:
70 Points
135. Audit Integrity Bands™
0–14 — Critical Error Governance Failure™
15–28 — Weak Error Governance™
29–42 — Developing Error Governance™
43–55 — Functional Error Governance™
56–64 — Strong Error Governance™
65–70 — Assured Error Governance™
136. Critical Audit Override™
Aggregate scores should not conceal:
known critical error continuing to circulate;
serious downstream decision contamination;
critical correction not propagated;
serious protective consequence not repaired;
deliberate or repeated suppression of verified correction;
systemic record contamination.
137. Error Audit Finding Classification™
EAF1 — Observation
EAF2 — Improvement Required
EAF3 — Material Weakness
EAF4 — Serious Error-Control Failure
EAF5 — Critical Error-Propagation Failure
138. Error Audit Evidence Hierarchy™
AE1 — Policy
AE2 — Control Design
AE3 — Record Evidence
AE4 — Operational Practice
AE5 — Correction Outcome
AE6 — Independent Assurance
139. No-Policy-Equals-Control Principle™
A policy stating that inaccurate records should be corrected does not establish that propagated institutional errors are actually traced, repaired and prevented from affecting later decisions.
140. Audit Closure™
An error-related audit finding should close only when:
root cause addressed;
corrective control implemented;
relevant propagation pathways retested;
decision consequences considered;
protective consequences addressed;
recurrence risk reduced;
evidence supports closure.
141. Assurance Architecture™
First-Line Error Control → Second-Line Governance Oversight → Independent Error Assurance
First Line
Detect, flag, contain and correct.
Second Line
Monitor materiality, propagation, overdue correction and recurrence.
Independent Assurance
Test whether error correction genuinely reaches downstream records and consequences.
142. Governance Dashboard™
Should show, proportionately:
open material errors;
critical errors;
propagation reach;
cross-agency errors;
outstanding corrections;
affected decisions;
overdue reassessments;
protective repairs;
zombie errors;
repeat propagation failures.
143. Learning Architecture™
Error → Propagation Analysis → Root Cause → Control Redesign → Implementation → Monitoring → Assurance → Learning
144. ERRORPROPAGATION-001™ Integrity Test
An institution should be able to demonstrate that:
institutional errors can be identified;
factual errors can be distinguished;
attribution errors can be identified;
context errors can be identified;
evidential-status errors can be identified;
chronology errors can be identified;
identity errors can be identified;
interpretation errors can be identified;
omission errors can be identified;
outdated information can be identified;
transfer errors can be identified;
correction failures can be identified;
error materiality is assessed;
error severity is classified;
error origin can be identified;
provenance can be traced;
replication can be traced;
transmission can be traced;
professional adoption can be identified;
cross-system transmission can be identified;
decision reliance can be identified;
protective consequences can be identified;
error footprints can be mapped;
error radius can be assessed;
error depth can be assessed;
propagation stages can be classified;
source correction is distinguished from systemic correction;
replication preserves provenance;
replication preserves evidential status;
replication preserves context;
replication preserves uncertainty;
replication preserves dispute status;
replication preserves correction status;
error multiplication can be detected;
error authority inflation can be detected;
institutional echo errors can be detected;
false corroboration can be detected;
number of records is distinguished from number of independent sources;
provenance breaks can be identified;
propagation blind spots can be identified;
vertical propagation can be traced;
horizontal propagation can be traced;
cross-institutional propagation can be traced;
temporal propagation can be traced;
legacy errors can be identified;
dormant errors can be identified;
reactivated errors can be identified;
decision dependency is assessed;
error reliance is classified;
downstream decision contamination can be identified;
decision contamination is not automatically equated with invalidity;
error counterfactuals can be applied;
clean-record counterfactuals can be applied;
independent-evidence counterfactuals can be applied;
protective consequences are reviewed;
error-induced protection gaps can be identified;
error-induced protective burden can be identified;
error-induced participation burden can be identified;
institutional error debt can be identified;
error debt accumulation can be assessed;
propagation velocity can be assessed;
propagation reach can be assessed;
persistence duration can be assessed;
error amplification can be detected;
error mutation can be detected;
context-stripping propagation can be identified;
status-stripping propagation can be identified;
dispute-stripping propagation can be identified;
correction-stripping propagation can be identified;
known errors can be contained;
reliance warnings can be issued;
known material errors do not continue being relied upon unnecessarily;
multiple detection routes exist;
affected records can be flagged;
propagation maps can be produced;
original records can be identified;
copies can be identified;
internal recipients can be identified;
external recipients can be identified where appropriate;
affected assessments can be identified;
affected decisions can be identified;
affected protective actions can be identified;
propagation boundaries can be estimated;
unknown propagation remains visible;
source correction can occur;
downstream correction can occur;
cross-institutional correction can occur where appropriate;
correction propagation is controlled;
correction velocity can be measured;
error–correction velocity gaps can be identified;
correction reach can be assessed;
correction depth can be assessed;
correction architecture is proportionate to propagation;
local correction is not mistaken for systemic repair;
decision reassessment triggers exist;
material reliance triggers review;
serious protective consequences trigger review;
protective repair can be initiated;
consequence repair can occur;
correction closure criteria exist;
error reappearance can be detected;
zombie errors can be identified;
zombie error risks can be tested;
correction durability is assessed;
corrections survive handover;
corrections survive system migration;
corrections survive archival retrieval;
repeated errors trigger root-cause analysis;
systemic error propagation can be identified;
systemic record contamination can be identified;
systemic correction failure can be identified;
propagation failures can be classified;
failure severity can be classified;
root causes can be classified;
an Error Propagation Register can be maintained;
error dependencies can be registered;
corrections can be registered;
correction propagation can be registered;
zombie errors can be registered;
remediation can be tracked;
material error rates can be measured;
propagation rates can be measured;
cross-institutional error rates can be measured;
detection time can be measured;
containment time can be measured;
correction propagation can be measured;
decision reassessment can be measured;
protective repair can be measured;
zombie error rates can be measured;
complete error repair can be measured;
Error Propagation Gates can be applied;
one-to-many replication can be stress-tested;
cross-agency propagation can be stress-tested;
source removal can be stress-tested;
correction propagation can be stress-tested;
decision contamination can be stress-tested;
archived error can be stress-tested;
handovers can be stress-tested;
system migration can be stress-tested;
false corroboration can be stress-tested;
context errors can be stress-tested;
survivor non-correction can be stress-tested;
future reactivation can be stress-tested;
error counterfactuals can be applied;
earlier detection counterfactuals can be applied;
correction propagation counterfactuals can be applied;
survivor burden counterfactuals can be applied;
whole-system error counterfactuals can be applied;
error-governance maturity can be assessed;
an Error Owner™ can be identified;
critical errors can be escalated;
reverse error audits can be conducted;
forward error audits can be conducted;
audit domains can be scored;
critical overrides can prevent aggregate scores concealing serious failure;
audit findings can be classified;
audit evidence strength can be assessed;
policy is not treated automatically as operational control;
audit findings require verified closure;
first-line error controls exist;
second-line oversight exists;
independent assurance can test correction effectiveness;
governance receives visibility of serious errors;
recurring error patterns feed institutional learning;
record design can be improved from findings;
information-transfer controls can be improved;
correction systems can be redesigned;
downstream decisions can be repaired where required;
protective consequences can be repaired where required;
institutional assurance can demonstrate that correction travelled as far as the material error.
145. Ultimate Institutional Test
Can the institution demonstrate that when materially inaccurate, incomplete, misclassified or contextually distorted information entered its systems, it could identify where the error originated, preserve or reconstruct its provenance, determine where it was copied and transmitted, identify who relied upon it, establish which decisions and protective actions were affected, prevent further reliance, propagate verified correction across the full material error footprint, reconsider consequential decisions, repair safeguarding consequences, prevent corrected information from reappearing and independently verify that the institutional effects of the error—not merely the original record—have been addressed?
If not:
The record may have been corrected—but the institutional error has not yet been fully repaired.
146. Framework Statement
ERRORPROPAGATION-001™ establishes that institutional error should not be treated solely as a problem of record accuracy. Once inaccurate, incomplete, misclassified or contextually distorted information travels through professional records, referrals, agencies and decisions, the safeguarding problem becomes one of propagation, reliance and consequence. SAFECHAIN™ therefore requires institutions to trace the complete error pathway from origin through replication, transmission, decision dependency and protective consequence, and to ensure that verified correction travels sufficiently far to repair the institutional effects created by the original error. The framework shifts institutional correction from “we amended the record” to the more demanding question: “have we repaired what the error caused?”
COPYRIGHT & INTELLECTUAL PROPERTY NOTICE
© 2026 Samantha Avril-Andreassen. All Rights Reserved.
The SAFECHAIN™ Institutional Error Propagation, Record Contamination & Downstream Decision Harm Framework™ — ERRORPROPAGATION-001™ is an original safeguarding governance, information-integrity, correction and institutional systems framework developed and authored by Samantha Avril-Andreassen, LLB (Hons), LLM, LPC, FRSA, Founder of SAFECHAIN™.
The original selection, arrangement, expression, architecture, classifications, tests, registers, metrics, gates, audit methodology, counterfactuals and framework-specific terminology contained within ERRORPROPAGATION-001™ are proprietary intellectual property to the extent protected by applicable law.
Original SAFECHAIN™ expressions include, where applicable:
Error Propagation™, Record Contamination™, Downstream Decision Harm™, Error Footprint™, Error Radius™, Error Depth™, SAFECHAIN™ Propagation Principle™, Error Authority Inflation™, Institutional Echo Error™, Provenance Break™, Propagation Blind Spot™, Temporal Error Propagation™, Legacy Error™, Dormant Error™, Reactivated Error™, Downstream Decision Contamination™, Error-Induced Protection Gap™, Error-Induced Protective Burden™, Error-Induced Participation Burden™, Institutional Error Debt™, Error Propagation Velocity™, Error Propagation Reach™, Error Amplification™, Error Mutation™, Context-Stripping Propagation™, Status-Stripping Propagation™, Dispute-Stripping Propagation™, Correction-Stripping Propagation™, Error Containment™, Material Error Flag™, SAFECHAIN™ Error Propagation Map™, Propagation Boundary™, Correction Propagation™, Correction Velocity™, Error–Correction Velocity Gap™, Correction Reach Integrity™, Correction Depth Integrity™, Correction Symmetry Principle™, Protective Repair™, Zombie Error™, Correction Durability™, Systemic Error Propagation™, Systemic Record Contamination™, Systemic Correction Failure™, Error Owner™ and the ERRORPROPAGATION-001™ Integrity Test™.
No claim is made to exclusive ownership of generic concepts or terminology relating to error correction, data accuracy, record management, information governance, audit, safeguarding or decision review existing independently of the original SAFECHAIN™ architecture and expression.
ERRORPROPAGATION-001™ is a safeguarding governance and systems-analysis framework. It does not by itself establish legal error, negligence, professional misconduct, procedural unfairness, regulatory breach, causation or liability. Application should remain consistent with relevant law, information-governance obligations, professional standards and institutional duties.
Author & Framework Developer: Samantha Avril-Andreassen, LLB (Hons), LLM, LPC, FRSA
Founder: SAFECHAIN™
Organisation: SAFECHAINN Ltd
Framework Reference: ERRORPROPAGATION-001™
Version: 1.0
Year: 2026
© 2026 Samantha Avril-Andreassen. All Rights Reserved.