Capabilities with an explicit stopping point
Tax: prepare, never collect by inference
A worksheet joins declared income, the applicable schedule and an exception register. The official sees each adjustment before a collection order exists. Missing declarations enter a clarification queue; silence is not zero income. A disputed amount is held separately so an appeal does not disappear inside a revised total.
Rations: reserve a reviewable allocation
The service prepares depot quantities against a stated population roster and reserve floor. A shortage produces a visible choice between delivery dates and quantities, not an invisible reduction. Local staff approve the final allocation. A household cannot lose its entry merely because two offices disagree on its spelling.
Identity: preserve the unresolved match
A possible match carries its source, date and confidence limits. Roster reciprocity is a negotiated administrative process; it is not permission to invent identity. Conflicting records remain separate until the authorised registrar resolves them. Applicants retain a paper route when exchange infrastructure is unavailable.
Emergency: offer a route, retain refusal
The dispatcher proposes transport and depot actions inside a pre-agreed area. An emergency flag does not enlarge the system’s machinery access. The duty officer can reject a route and must record why. If the signature office is unreachable, the last approved contingency plan applies; no new authority is silently created.