Principle
The effects are visible. The mechanism is not
An instrument is trusted because its readings hold up, not because its internals are on display.
Principle
Warrant: Foundation
Bayswater operates on decisions about employment and deployment. That places it inside two of the most consequential regulatory regimes in Europe, and the correct response is not compliance language: it is design that survives inspection.
01 · Regime
Regulation (EU) 2024/1689. Employment and worker-management systems sit in the Act's most heavily obligated category. Article 13 requires transparency toward the deployer: a party using the output must be told what the system's confidence actually is. Bayswater discloses session-adjusted confidence as a matter of design, not disclosure policy.
Regulation (EU) 2016/679. Assessment of a worker is processing of personal data about that worker, with everything that follows: lawful basis, minimisation, retention limits, and the subject's rights over the record and the reasoning applied to it.
A regulation can be met in two ways, and the difference is visible from outside. It can be met by a layer added at the end: a page of disclosure, a consent notice, a file recording who signed what. Or it can be met by building a system that cannot produce the prohibited output in the first place. The first survives an inspection of documents. The second survives an inspection of behaviour.
Bayswater takes the second, and the reason is not principle. It is cost. A disclosure layer has to be maintained by people who remember it, at every output, forever, under commercial pressure to make the output look more certain than it is. A constraint built into the thing that generates the output has no such failure mode. It holds on the day nobody is watching, which is the only day the question is ever really asked.
The transparency obligation is worth stating precisely, because it is narrower than it is usually read to be. It is not an obligation to publish a method. It is an obligation to tell the party relying on an output how confident the system actually is. Those are different disclosures, and only one of them is owed. Bayswater owes the second and declines the first, which is the position argued at why the effects are visible and the mechanism is not.
On the data side the load-bearing word is minimisation. A record of a worker larger than the decision requires is not a richer record. It is a longer retention clock and a wider surface, and every additional field is a field somebody has to be able to justify, correct and erase on request. Collecting less is not a concession made to the regulation. It is the same discipline that keeps a state estimate honest, arriving from a second direction.
A rule that is obeyed only when someone remembers it is not a rule. It is a habit.
02 · The provisional disclosure
Assessments produced from a single structured session are marked provisional, visibly, on the output itself. The marking is not a disclaimer buried in terms; it appears on the cover, as a standalone notice, and again against any recommendation.
It is removed only when two conditions are met: the formal stopping rule is satisfied, meaning the evidence is sufficient on its own terms, and a real placement outcome has validated the prior. Neither condition can be waived commercially.
The reason for putting the label on the output rather than in the terms of business is that the output travels and the terms do not. A clearance is read by a supervisor at a gate, by a planner three weeks later, by a party carrying the risk on the job who was never present at any negotiation. Confidence stated only in the contract is confidence stated to the one party least likely to be holding the page at the moment the decision is taken.
The commercially uncomfortable property of this design is that the mark cannot be bought off. A counterparty who would prefer an unqualified output cannot obtain one at any price, because there is no route by which the mark lifts for a reason that is not evidential. That is precisely why it lives in the generator and not in the sales conversation.
What eventually lifts it is a dated claim meeting the world. Every assessment leaves here carrying a checkable statement about what happens next, and that statement is revisited against what actually occurred. That binding is set out at the calibration ledger, and it is the only mechanism that removes a provisional mark or confirms it should stay.
A system that cannot say I do not yet know should not be trusted when it says anything else.
03 · Regime, never nationality
Warrant: Foundation
Industrial workers are trained and certified under different regulatory regimes, and those regimes genuinely differ in what they verify. Accounting for that difference is legitimate and necessary. Accounting for where a person is from is discrimination.
Bayswater's adjustments are made against the regulatory regime under which a worker was trained and certified, applied uniformly to every worker trained under that regime, regardless of their nationality, residence or origin. Two workers of different nationalities certified under the same regime receive the same adjustment. One worker holding certification under two regimes is evaluated against each.
This is enforced as a gate on the output, not as guidance to an operator. Nationality is not an input to it.
The test is mechanical, and it is worth stating as a test rather than as a value. Take two workers whose certification, training route and verified history are identical, and who differ only in nationality, residence or place of birth. If the outputs differ, the system is discriminating, whatever its documentation says about intent. If the outputs are identical, the adjustment is doing what it claims. Nothing about the intention behind the adjustment enters that check. It is decidable from the outputs alone, by someone who has never seen the inside.
The adjustment exists at all because regimes are not interchangeable. Two certificates carrying the same name can sit behind different requirements: different supervised time, different examination, different re-verification interval, different treatment of the gap between what was assessed in a room and what is done on a site. A system that ignored that difference would not be neutral. It would be asserting that every regime verifies the same thing, which is a factual claim, and a false one.
What the adjustment must never become is a proxy. A regime maps loosely onto geography, and any adjustment made by regime will correlate with origin in a real population. The correlation is not the offence. The offence would be using it: reaching for the regime because it stands in for something that cannot be asked about directly. That is why the regime is the input and the reasoning is the derivation rather than the other way round. An adjustment that cannot be traced to a stated difference in what a regime verifies does not exist here, because a figure with no derivation behind it does not survive generation at all.
The worker keeps the right to see which regime was cited against them and to contest what is recorded. That is the subject-rights half of the second regulation doing load-bearing work rather than sitting in a policy, and it is also the cheapest correction mechanism available: the person being described is the party most motivated to notice when the description is wrong.
The difference between regime-based adjustment and nationality-based discrimination is load-bearing, and it is the one thing on this page that would be fatal to get wrong.
The body of rules under which a worker was trained, examined and certified: what had to be demonstrated, in front of whom, and how often it is re-verified. A property of the certification, not of the person holding it.
Fixed here, and used in this sense throughout the site.
Not an input. It is absent from the calculation rather than weighted at zero, and the difference between those two states is the whole argument: a zero weight is a setting, and a setting is something a person can change.
04 · What is enforced mechanically
Principle
Warrant: Derivation
Each of the following halts or alters output automatically. None depends on an operator remembering.
Any figure without a derivation behind it stops generation. See Foundations.
Applied at three points in every single-session output and removable only on the stated conditions.
Comparative and predictive statements beyond model scope are refused rather than softened.
Clinical, psychometric and cognitive-ability language is stripped before render. Bayswater describes occupational signal under structured constraint, not psychology.
Adjustments cite regulatory regime. Nationality cannot enter the calculation.
All five run at the point of generation. The output is assembled, scanned, and either passes or does not exist. There is no state in which a violating output is produced and then corrected, because correction after the fact is the failure mode being designed against: it is applied unevenly, it is applied last, and it is applied by whoever is nearest the deadline.
A gate is also a cheaper thing to inspect than a policy. A policy has to be evidenced by showing that people followed it, which means evidencing a negative about human behaviour across every output ever produced. A gate is evidenced by showing that it runs and by showing what it stopped. The record of refusals is part of the record rather than an embarrassment kept out of it, and a stretch in which nothing was refused is itself a reading that has to be explained.
A gate stops an output before it leaves. A named rule decides who carries the cost when an output that did leave turns out to be wrong. Those are the same discipline at two altitudes, and neither is improvised once the consequence has already arrived.
Liability allocated by a named rule, before the first incident
05 · What is withheld, and why
Principle
An instrument is trusted because its readings hold up, not because its internals are on display.
Two things are withheld, and only two: the construction of the representation, and the calibration that turns an observation into a claim about a later outcome. Everything else is stated. What the work is optimised against, what the system refuses to determine, who bears the cost when it is wrong, where the evidence currently runs out. The withholding is deliberately narrow, because a firm opaque about everything is not protecting an asset. It is concealing the absence of one.
This is what makes the position legible under a transparency obligation rather than in tension with it. What is owed is owed about the output: its confidence, its scope, the conditions under which it was rendered, and the point at which it stops applying. None of that requires publishing how the estimate was formed, and publishing how the estimate was formed would not supply any of it. A reader handed the internals would still not know how far to trust the reading. A reader handed the confidence, the scope and the expiry knows exactly.
Most systems in this category are marketed on what they can determine. The more useful question, for anyone whose exposure is real, is what the system refuses to determine and what happens when its evidence runs out.
That is the part Bayswater will describe in full.
How it is constructed is not described here, and will not be.