Safety without surveillance

How privacy-preserving architecture can reduce harm without making permanent records of everyone’s lawful inquiry.