Scale, opacity, and the structural precondition for systemic harm
Scale enables opacity. Opacity permits the gap between declared and actual behaviour to persist and compound. That gap is the structural precondition for systemic harm.
Transparency acts on both variables simultaneously: it expands the zone in which action and consequence remain coupled, and it contracts the scale that opacity was sustaining. The harm potential of a system is therefore proportional to its scale and inversely proportional to its feedback integrity.
| H | Harm potential | The capacity of a system to produce and sustain outcomes that diverge harmfully from its declared purpose, without corrective intervention |
| S | Scale | Total operational reach of the system. S = Sr + So. Proxy: total headcount and volunteer count, plus resource allocation |
| Sr | Real scale | The portion of scale supported by genuine value creation and accountable feedback. Proxy: headcount and resource percentage directly attributable to production or delivery of the institution's stated output |
| So | Opacity-enabled scale | The portion of scale that can only exist because consequences are hidden, delayed, diffused, or externalised. Proxy: headcount and resource allocation to functions not directly involved in production or delivery, including marketing, PR, governance overhead, and legal beyond compliance minimum. So = S minus Sr |
| F | Feedback integrity | The degree to which action and observable consequence remain coupled within the system. Ranges from 0 (fully decoupled) to 1 (fully coupled). Composite proxy: see below |
| T | Transparency | The structural condition under which consequence becomes visible and attributable to the actor who produced it. T acts on both F and So simultaneously |
| O | Opacity | The medium that fills the gap between declared and actual behaviour. Generated by scale, complexity, distance, and information asymmetry. O is the mechanism connecting S and F, not an independent input: O ∝ S / T |
Transparency does not merely make large systems more accountable at their existing scale. It reveals which parts of their scale were only possible because accountability had failed. This is the critical distinction between a reform that manages opacity and one that dissolves it.
The contraction of So is not an intended consequence of transparency. It is a structural one. Once consequences become visible and attributable, the positions, functions, and resource allocations that depended on consequence remaining invisible can no longer be sustained by the system that was previously absorbing their cost. Some of what appeared as productive scale was the financial and operational expression of uncoupled consequence. Transparency does not reduce it. It reveals that it was never real.
Scale is legitimate only up to the boundary where feedback remains intact. Beyond that boundary, what presents as productive capacity is opacity-supported overextension. Transparency does not shrink a healthy system. It removes the portion that was only healthy in appearance.
Opacity is rarely fabricated. It emerges. Scale generates complexity. Complexity generates distance between actors and consequences. Distance generates information asymmetry. Information asymmetry generates the conditions under which rational actors can sustain behaviour that would be corrected if its consequences were visible. Each stage is the logical output of the previous one. No malice is required at any point.
The forms opacity takes are varied but structurally equivalent. Geographic distance between decision and consequence. Temporal displacement, where the outcome surfaces years after the actor has moved on. Diffuse attribution, where harm is distributed across so many actors that none can be held individually accountable. Complexity as opacity, where the system is too intricate for any participant to trace consequence even with full intent to do so. And the most durable form: the moral or institutional framing that renders the structural question illegitimate before it can be asked.
All of these are the same mechanism at different resolutions. All are downstream of scale. All are dissolved, in principle, by transparency. The relationship is not circular. Scale produces opacity as a structural output, not by design. Transparency dissolves opacity as a structural input, not by goodwill.
The variables in the law are not directly observable in most institutional contexts. The following proxies are proposed as measurable indicators. They are directionally reliable even where precise calibration is not possible. The direction of travel matters more than the absolute value.
Scale (S) is proxied by total headcount including volunteers, plus total resource allocation. Sr is the subset directly attributable to production or delivery of the institution's stated output. So is the remainder: functions not directly involved in that production, including but not limited to marketing, public relations, governance overhead beyond statutory compliance, and legal beyond minimum regulatory requirement.
Feedback integrity (F) is a composite of four measurable dimensions:
A composite F score is derived from these four dimensions. The weakness is that each requires data the institution controls and may not report accurately, which is itself an opacity condition. Where self-reporting is the only available source, the reliability of the F measurement is inversely proportional to the institution's So ratio. High So institutions have the strongest incentive to misreport F and the least structural pressure to report it accurately.
The opacity that generates So is the same opacity that suppresses accurate F measurement. The two are not coincidentally related. They are the same variable observed from different positions in the system.
This is not a measurement problem that better data collection resolves. It is a structural property of the system being measured. The same opacity that inflates So degrades the accuracy of any F measurement derived from institutional self-reporting. The practical implication is that F, as measured, should be treated as an upper bound in high-So institutions — the true value is likely to fall below the measured value in direct proportion to the So/S ratio. In the institutions where the law’s harm potential is highest, the F figure available for input is also the least reliable. The two errors compound in the same direction: measured H understates actual H wherever So is large. This is not a limitation of the law. It is a structural prediction of it.
Reputation management expenditure is already classified within So: functions not directly involved in production or delivery of the institution’s stated output. But this classification understates its structural effect. Reputation management is not merely overhead. It is a load that compounds with the size of the gap it is maintaining.
For reputational consequence to function as a corrective mechanism, three structural prerequisites must hold: the behaviour must be visible to the relevant network; attribution must be clear and fast enough that reputation travels before the actor exits; and future interactions must remain possible so that reputational damage carries real cost. These prerequisites are cognitively bounded. Research on human social architecture establishes that individuals can maintain stable social relationships with approximately 150 others — the maximum number whose behaviour and reputation can be actively tracked and processed. Beyond that boundary, no authentic reputation can exist. Where one appears to, it has been fabricated.
Fabrication here is a structural description, not a moral one. At institutional scale, constructing reputation through signals, proxies, and managed perception is not a choice. It is a necessity imposed by scale. Every institution operating beyond that threshold is, by structural necessity, maintaining a fabricated reputational layer. And unlike load displacement, fabricated reputation has no release valve. Each signal emitted to sustain the fiction adds to the total fiction that must be maintained. The coordination burden grows faster than linearly with institutional size. Resources deployed to manage it are consumed without closing the gap between presented and actual performance — which is precisely what So represents.
The consequence is that So, as a raw figure, understates its own contribution to harm potential. As So grows relative to Sr, the reputational fabrication load grows non-linearly, consuming productive capacity and widening the gap that opacity was already sustaining. This is an amplification of the So term, not an independent variable. It operates within So, not alongside it. The amplification is formalised by replacing So with an adjusted term So*:
Network complexity research establishes that coordination burden grows at least exponentially with the number of relationships requiring coherent maintenance — the natural exponential is therefore a lower bound, not a calibrated claim. The effect at realistic So/Sr ratios is substantial even under the most conservative assumptions:
The So multiplier is not an optional refinement. It is a structural property of opacity-enabled scale beyond the authentic reputation threshold. Applying the primary relation without it to large institutions systematically underestimates the harm potential the law is designed to surface.
The underlying mechanism is more precise than it first appears. What So accumulates is not the cost of maintaining a false reputation. Reputation, even false reputation, could theoretically stabilise — a sufficient fiction established, maintenance cost plateauing. What So actually accumulates is the cost of familiarity signal manufacturing: the sustained production of exposure, proximity, and recognition at sufficient volume and frequency to occupy relationship-adjacent space in the cognition of people who will never have first-degree contact with the institution. PR functions, brand expenditure, communications overhead — these are not reputation management. They are signal factories. And unlike reputation, familiarity signals have no stable state. They decay the moment production stops, because they were never anchored to first-degree experience. There is no equilibrium. The treadmill has no off switch. The institution must continuously reproduce the conditions of apparent trustworthiness because it cannot provide the thing that would make trustworthiness apparent without reproduction: provenance data. Show the working. Let people decide. The moment an institution can do that, the signal factory becomes unnecessary. The moment it cannot, the factory must run indefinitely and at increasing cost as the gap between declared and actual performance widens. This is why So* has no ceiling. It is not that the fiction gets larger. It is that the signal required to sustain it must be continuously reproduced just to hold still — and the resource cost of that reproduction is what the So multiplier is measuring.
The technology sector is the most likely candidate for disproving the law. Large technology companies operate at extraordinary scale, yet their opacity-enabled overhead is visibly low relative to their output. Their harm potential appears to contradict the primary relation. It does not. The apparent exception is the law operating exactly as stated in conditions where feedback integrity is structurally enforced rather than structurally suppressed.
The critical correction: low So is not independent of high F. So is the scale that can only exist because feedback integrity is low. Where F is genuinely high, that scale cannot be sustained — the feedback eliminates it. Low So is therefore not a separate observation from high F. It is the observable structural consequence of it. An institution with low So has low So because its F is high. The variables are the same phenomenon observed from different positions in the system.
Technology produces this outcome structurally rather than by intention. Software output is immediately and precisely measurable. A product claim is falsified at point of use, at near-zero cost, by the user, with results that are trivially shareable. Attribution latency approaches zero — the code works or it does not, immediately, visibly, and without requiring institutional interpretation. Exit rights are high in most technology markets: switching costs are low, alternatives are accessible, and the technical capability to evaluate them is concentrated in the user base. Performance coupling follows from revenue conditionality in competitive markets where a product that fails benchmarks loses sales within the product cycle. All four F dimensions are structurally elevated by the nature of the output. The law predicts exactly the outcome observed: high F produces low So, and harm potential stays proportionally low despite large scale.
The broader economic implication is significant. Technology’s genuine productivity gains, produced under high-F conditions, appear in aggregate statistics alongside other sectors’ opacity-enabled productivity claims, which are partly fabricated. The aggregate masks the deficit. Technology’s real output is partially compensating for other sectors’ structural underperformance — not only in financial markets through index weighting, but in the real economy through infrastructure, logistics, communication, and coordination tools that extend the productive capacity of sectors that would otherwise be operating at lower efficiency still. The productivity statistics look disappointing outside technology precisely because they are: the F conditions that produce real productivity are absent in most other sectors, and their apparent output is partially So masquerading as Sr.
Technology does not disprove the law. It demonstrates it. High feedback integrity produces low opacity-enabled scale as a structural consequence. The sector’s observable characteristics are what the law predicts for any institution operating under genuine feedback conditions.
Valve Corporation is the clearest large-scale demonstration of the law operating in the direction of low harm potential. The company generates annual revenue estimated above $10 billion, operates the dominant PC gaming distribution platform globally, and employs fewer than 400 people. The Sr/S ratio approaches 1. So is near zero. The law predicts exactly this structure for an institution that has maintained high F across all four dimensions simultaneously — and Valve has done this through deliberate structural choices at each level.
Organisational structure. Valve operates without managers. Project attachment is voluntary — employees move between projects based on where they believe they can contribute most. There is no hierarchy to generate coordination overhead, no management layer to insulate decision-makers from product consequence, and no organisational distance between the people making decisions and the feedback those decisions generate. The Dunbar threshold problem — the point at which authentic reputation becomes impossible and fabrication becomes structurally necessary — is addressed not by building reputation management infrastructure around it, but by keeping the organisation small enough and flat enough that authentic reputation remains possible. So does not accumulate because the structure does not create the conditions for So to accumulate.
The Steam review system. At platform scale, Valve confronted the standard problem of reputation beyond two degrees of separation: how does a user evaluate a product from a developer they have no direct relationship with, without requiring a trusted institutional intermediary? Most platforms solve this by creating centralised rating systems that are immediately gameable — fake purchases, coordinated reviews, competitor manipulation. Amazon and similar platforms illustrate the failure mode: at the price points of most consumer goods, the cost of a fake review is trivially low relative to the reputational benefit, and the purchase requirement offers no real protection.
Steam’s review system closes this structurally rather than procedurally. Reviews require a genuine purchase through the platform — login-bound, account-verified, impossible to separate from the purchasing record. But the mechanism that makes the system genuinely resistant to fabrication is the display of hours played alongside every review. A negative review from a user with two hours of playtime on a 60-hour game carries a completely different evidential weight to a negative review from a user with 200 hours. The credibility signal is embedded in the review itself, visible to any reader, without requiring institutional interpretation. Coordinated seeding fails because fake reviewers either have zero hours — immediately suspect — or must actually play the game to build hours, at which point they are generating genuine signal regardless of their original intent. The system does not require trust in the reviewer. It makes the reviewer’s conditions transparent.
This is a digital solution to the Dunbar reputation problem that does not require centralised trust intermediation. Reputation travels accurately beyond two degrees of separation not because an institution is vouching for it, but because the conditions that generated it are visible alongside it. The feedback loop remains intact at platform scale.
The GPU ecosystem. Steam’s largest revenue category — high-performance PC gaming — is served by a hardware ecosystem with near-zero attribution latency and a customer base that is both technically capable of verification and culturally incentivised to perform it publicly. GPU performance claims are independently verifiable at point of use, using standardised benchmarking tools, with results shareable to an audience of technically literate peers who will replicate or contest them within days of any product launch. A manufacturer that overstates performance is falsified not by a regulator or a journalist but by the customers themselves, immediately, at near-zero cost, with results that propagate through the same networks the marketing claim was trying to reach. Opacity is structurally irrational in this environment. The cost of fabrication — the reputational destruction when benchmarks contradict the claim — exceeds any benefit within a single product cycle. F is therefore structurally high not by institutional choice but by the nature of the customer base and the measurability of the output.
Valve operates at the intersection of all three layers: an organisation that maintains high F internally through structural design; a platform that solves the Dunbar reputation problem digitally; and a hardware ecosystem where the customer base enforces feedback integrity independently of any institutional actor. The result is an institution with revenue at a scale that would typically generate enormous So, operating with So near zero, and harm potential proportionally low. It is not an exception to the law. It is the law’s predicted outcome for an institution that has successfully maintained genuine feedback integrity as it scaled.
The law applies to systemic harm. It does not claim to explain all harm at the individual level, though the mechanism operates there too and the same structural logic applies wherever scale has separated action from observable consequence.
Systemic harm, as the term is used here, does not require physical injury or any single identifiable victim. It refers to four structural conditions, each of which produces real cost that lands somewhere in the system or beyond it. First: sustained divergence between declared and actual institutional behaviour, maintained without corrective intervention. Second: resources consumed by opacity-enabled functions that produce no output consistent with the institution’s stated purpose — scale that exists because consequence is hidden, not because value is created. Third: consequences externalised onto actors who had no part in generating them — counterparties, contractors, the public, or future participants who inherit the accumulated load. Fourth: the degradation of corrective capacity in the broader environment, as institutions operating beyond their feedback boundary progressively undermine the mechanisms that would otherwise constrain them. The financial crisis of 2008 is the clearest large-scale example: systemic harm in this framework was accumulating for years before any individual loss became visible. The harm was structural before it was personal.
The law does not claim that large systems are inherently harmful. It claims that harm potential rises with scale and falls with feedback integrity, and that the relationship is not linear. A large system with high feedback integrity can be less harmful than a small system with near-zero feedback integrity. The ratio is what matters, not either variable in isolation.
The law does not advocate for any particular scale of institution, any ownership model, or any political arrangement. It identifies the structural variable, feedback integrity, and the structural driver, opacity enabled by scale, and states their relationship to harm potential. What follows from that in terms of institutional design is a separate question, addressed by the applied frameworks built on this foundation.
The law is falsified if a system can be identified in which systemic harm persists and compounds without opacity as a structural precondition, or in which opacity is present without scale as its driver. Both conditions would require a mechanism the law does not account for. Neither has been identified.
The variables in the law are measurable by proxy. Enter values for your institution. The calculator derives So from your scale inputs, applies the So* amplifier, computes a composite F score from the four feedback dimensions, and returns H under both the primary and amplified relations. The chart shows where your institution sits on the So/Sr exponential curve.
Default values represent a mid-sized UK public body — a regional NHS trust, a large local authority, or a regulator with approximately 2,000 staff. Adjust to your institution.
Reference institutions are plotted at estimated So/Sr ratios derived from publicly available data. They share the same F-scaled curve as your institution — their positions are fixed on the So/Sr axis, not recalculated per run. They exist to contextualise your result, not to provide precise comparative scores.
All inputs are user-supplied. Defaults are anchored to publicly available benchmarks — NHS Digital, NAO, CIPD, OECD, and Institute for Government. The So* amplifier applies e(So/Sr), the minimum amplification consistent with network complexity literature (Briscoe, Odlyzko & Tilly 2006; Metcalfe 1995). H values are dimensionless ratios indicating relative harm potential — directional and comparative, not absolute.