QAEDA-TST-003 · design constraint
Test the least-restrictive means
Can the same safety objective be achieved with less restriction on lawful inquiry, privacy, identity, speech, access, or user agency?
Pass condition
What a defensible proposal should be able to show.
The proposal compares meaningful alternatives and explains why warnings, user controls, friction, rate limits, sandboxing, local classifiers, anonymous credentials, targeted warrants, or narrower capability controls would not adequately address the harm.
Warning signs
Signals that the proposal is drifting.
- A broad ban is proposed before narrower controls are tested.
- Administrative convenience is treated as necessity.
- The proposal centralizes identity or inquiry data even though the safety function does not require it.
- The burden falls on all users to prevent abuse by a small subset.
Evidence to demand
What should exist before confidence rises.
- Comparative testing of at least one materially less restrictive alternative.
- Expected harm reduction and error costs for each alternative.
- Operational explanation of why the broader mechanism adds necessary marginal benefit.
Without comparative design review, exceptional controls become defaults because they are easier to administer, not because they are necessary.
Trace the basis
Related public records
These links serve different functions. Arguments explain reasoning, Claims own evidence confidence, Positions state current commitments, Essays provide synthesis, and Reading Paths provide navigation.
Arguments
QAEDA-ARG-002Target the harm layer before the identity layerworking thesisQAEDA-ARG-003Safety and privacy are not automatic oppositesevidence synthesisQAEDA-ARG-012Audit behavior, not only policy promisesmethodological ruleClaims
QAEDA-CLM-014supportedPrivacy-preserving safetyQAEDA-CLM-016editorial_inferenceLeast-restrictive AI safetyQAEDA-CLM-019supportedPrivacy-preserving age assurancePositions
least-restrictive-safetySafety should target the harm layerworking positionprivacy-preserving-safetySafety and privacy are not automatically oppositesevidence backed observationEssays
QAEDA-ART-005Safety without surveillanceEditorial synthesisQAEDA-ART-006The safety poison pill, narrowedEditorial synthesisQAEDA-ART-009Audit the gatekeeperEditorial synthesisReading paths
QAEDA-COL-003Safety without a permanent ratchetCurated navigationWorked applications
How this test changes concrete scenarios.
Each case applies all ten tests independently. The result shown here is only this test’s finding, not an averaged score.
Decision discipline
No single passing test licenses the intervention.
Apply the full sequence. A defined harm does not excuse a weak nexus; a narrow mechanism does not excuse secret secondary use; an appeal process does not prove efficacy.