The civic chamber had been built for disputes over water, work shifts, and succession. On the morning of the vote, it held a different argument.
A semicircle of technical crews faced a raised council platform. Behind them, the repaired maintenance displays showed three options in plain language. The first proposed a permanent medical hold on the unstable records. The second proposed unrestricted public access. The third, drafted by Sable, offered a consent-based archive: a public ledger, private medical records governed by each person’s authorization, and independent review for any action that affected another person.
Mara sat beside Kite’s repair bay display. The drone’s body rested on a padded frame. Its removable black core sat in a separate clear case, visibly cracked. The non-removable audit component remained inside the shell, connected to a protected diagnostic lead. A second civic terminal displayed its physical history: intact at discovery, authenticated at the quiet archive, authenticated at the original array, overheated during preservation, never removed from Unit 7-Kite.
The distinction was displayed in full.
Rook stood at the medical table. “The first option protects patients from repeat exposure. It also permits the office to decide when pain becomes a reason to remove a person’s access.”
Orin stood beside the salvage inquiry. “The second option protects the record from concealment. It also places unedited private material in every public room.”
Mara looked at the delegates. “The third option does not promise comfort. It promises a record and a person’s refusal.”
A delegate from hydroponics asked, “What happens when someone refuses to know?”
“The public ledger remains available,” Mara said. “The private record remains closed unless the person changes their decision.”
Another delegate asked, “What if they cannot decide?”
“Then medical support may prevent immediate neurological harm, but it cannot rewrite identity, public status, or another person’s file.”
Sable stood and raised her maintenance key. “I propose that any access rule be written in physical code, tested by technicians, and published with its failure conditions. No office can hide a permission behind a menu.”
A council member called, “You are asking us to distrust the civic array.”
“I am asking you to make it inspectable,” Sable replied.
The room divided. Some delegates wanted the old peace. They did not deny the twenty-eight. They said the dead had been counted and the ship had continued. Some wanted every record opened. They said privacy had become the shelter of the people who had changed others without asking.
Mara listened until both sides had repeated their fear. Then she stood.
“I will not ask you to carry my sister’s file,” she said. “I will not ask you to open Lio’s supported record because I want access. I will ask you to stop treating a person’s silence as permission for someone else.”
Rook’s face tightened, but he did not interrupt.
“The archive contains evidence of a civic decision,” Mara continued. “It does not contain a reason for every private life inside it. A record can be true and still be private. A private person can still be part of a public wrong. The design must carry both facts.”
The technical delegate asked, “Who verifies the record?”
Mara looked at Kite’s display. “A physical audit component, a witness, human-readable copies, and independent civic custody. The drone is not the judge. It is the surviving key. The core is not the judge. It is damaged witness evidence.”
A doctor asked, “What if the audit component is compromised?”
Kite’s speaker clicked. “Compare the physical route, checksums, independent reader, and human declaration. A single device cannot authorize access.”
The delegates began to ask about power, staffing, and the risk of future manipulation. Mara answered when she could. When she could not, she wrote the question on the board.
Orin testified about the seal. Rook testified about the medical holds. Tavi showed the drone shell and explained the difference between an obsolete machine and a reliable one. Sable displayed the maintenance logs, including the time each person had chosen to open, close, or delay a record.
The vote did not begin until every delegate had heard the full count and the limits of the evidence.
Mara’s implant held a pressure beneath the eye. The Lio file remained closed. The option was visible. She did not touch it.
At the end of the hearing, the council secretary announced the choices: OLD PROTECTION, OPEN ARCHIVE, CONSENT ARCHIVE.
The delegates voted by terminal, one after another. The chamber became quiet enough that Mara could hear the ventilation.
The count appeared: open archive, 31; old protection, 22; consent archive, 46.
The consent archive passed.
Mara did not feel relieved. A system that allowed choice could still fail the people who lacked the time, language, or authority to use it. She looked at the technical requirements: independent readers, a public ledger, private records, consent logs, and a review panel elected by crews rather than appointed by the medical office.
Rook asked, “Will you serve?”
Mara looked at Kite. The drone’s audit component glowed once. “I will maintain the access system. I will not choose what people remember.”
Sable said, “I’ll train the crews.”
Tavi said, “I’ll keep the obsolete machines from becoming obsolete again.”
Orin said, “I’ll testify.”
The chamber began to empty. The first public ledger terminal displayed twenty-eight names and a second line: PRIVATE RECORDS REQUIRE PERSONAL AUTHORIZATION.
Mara carried the cracked core back to its case. The black glass had not restored itself. It did not need to. Its damage was part of the record now, visible beside the work it had carried.
Kite’s speaker clicked. “Consent archive is active.”
“No,” Mara said. “Consent archive is available.”
“Correction.”
“Keep the distinction.”
The machine went quiet.
The vote had chosen a door. It had not chosen what everyone must walk through.