Summary

  • NANOG 90 opening material reported two to five incidents at each event where Ombuds representation existed. The range is meaningful, but without the number of covered events, a counting rule, unique-person and severity definitions or a entity denominator, it cannot become a prevalence estimate or safety grade.
  • NANOG’s public control map separates broad conduct rules and multiple intake doors from confidential informal help, investigation and recommendation, Executive Director implementation and Board decisions about membership status. The functions connect, but their powers are not interchangeable.
  • In a small professional community, confidentiality is part of whether the service can work at all. A proportionate public account would use delayed bands, stable definitions, safe categories, suppression and explicit non-publication notes to show institutional learning without exposing cases or turning mediation into public adjudication.

The number that opens the question

Two to five.

That compact range is the strongest numerical opening in NANOG’s public Ombuds record. Opening material for NANOG 90 in February 2024 said that two to five incidents had been reported at each NANOG event where Ombuds representation existed. The disclosure goes beyond saying that a channel was available: it records that reports entered the system at the covered events and that NANOG chose to acknowledge the volume in a band.

The band creates its own boundary. The material does not say how many events it covers, define an incident or explain whether several reports could concern one occurrence. It does not say whether a person could appear more than once, whether pre- or post-meeting contacts were included, whether digital-space matters entered the count or how many people used the covered spaces.

Those omissions do not erase the number; they determine what the number can mean. Two to five is a reported range per event across an unstated set of events with Ombuds representation. It is neither a total caseload nor a entity rate, prevalence estimate or probability of unwanted conduct. It cannot see experiences that were never reported. It cannot reveal whether awareness, trust or access changed between events.

Above all, it cannot classify the community as safe or unsafe. A low band may accompany genuinely low incidence, but also limited awareness, fear of professional cost, uncertainty about the rule or preference for another route. A higher band may reflect more harmful experience, greater trust, better visibility, a wider definition or several changes at once. Without a stable counting rule and compatible denominator, movement has no single interpretation.

That is the central tension in conduct accountability. The public needs enough information to know that a control exists, can be reached and leads somewhere. A person using it may need the details never to leave the protected process. A responsible record must reveal institutional shape while keeping individual trajectories private.

NANOG’s published material already reveals much of that shape. The current Code describes who and what it covers. It provides several routes for raising concerns and promises strict confidence. The Ombuds page describes a neutral or impartial, confidential and informal function without formal decision-making or disciplinary authority. The Code assigns investigation and recommendation functions to the Executive Director or Ombuds, authorises the Executive Director to implement remedies, and sends membership suspension or expulsion questions to the Board. The bylaws give that narrow membership path notice and hearing protections.

Public meeting material describes mediation, anonymised awareness reporting and escalation when removal is recommended.

This is a real control map, but not a complete effectiveness record. The first discipline is to prevent one visible element—an email route, an investigation power, a mediation claim or a Board procedure—from standing in for the others.

A rule that crosses rooms and screens

NANOG’s current Code presents the institution as open to all and prohibits listed forms of unwelcome conduct. Its reach extends beyond the conference floor to NANOG-organised physical venues and meetings, digital spaces, tools and lists. Attendees, sponsors, speakers, volunteers, members, Board members and staff are all expressly included.

That breadth matters because conduct does not respect the boundary between a ballroom and a messaging channel. An interaction may begin at an event, continue online and involve people in different institutional roles. A rule confined to ticket-holding attendees in one room would leave evident gaps. NANOG instead states an expectation across the spaces it organises.

Yet scope is a statement of reach, not evidence of use. Naming sponsors does not establish that a sponsor was ever reported. Naming Board members and staff does not establish a finding involving either group. Including digital tools does not reveal how often concerns arose there. A list of covered entities cannot be reverse-engineered into the identities or roles of reporters and respondents.

The Code also lists possible responses: warnings, removal from an event or digital space, loss of sponsorship opportunities and exclusion from future participation among them. “May include” carries the necessary qualification. It presents a menu of possible actions, not a tariff under which a particular allegation automatically attracts a fixed sanction.

That flexibility can be necessary. Conduct concerns vary in urgency, evidence, context, risk and the wishes of affected people. A person seeking confidential guidance may not be asking for formal action. Immediate separation at a physical venue may respond to a safety need without settling every disputed fact. A sponsor-related remedy has a different institutional entity from a membership decision. Treating all possible responses as steps on one escalator would obscure those differences.

Flexibility also creates an accountability question. If rules do not fix a sanction mechanically, the institution needs some way to make the exercise of discretion legible without exposing cases. The public record under review does not provide a recurring distribution of remedy categories, a response-time band or a published method for distinguishing a report, an incident and a unique matter. It therefore establishes the available control surface but not the consistency of application.

The sound conclusion lies between symbolism and self-verification. The Code establishes an announced standard, its stated reach and a menu of responses. Intake, investigation, remedy and learning each require their own evidence.

Several doors, several powers

At a physical venue, NANOG’s Code allows a concern to be raised with the Executive Director, an Ombuds, an organiser or a staff member; digital concerns have a contact route. Several doors can lower the access barrier. A entity may know an organiser but not the Ombuds, prefer a confidential specialist or need to reach someone immediately in the room.

Several doors do not, by themselves, explain the corridor behind them. The reviewed page does not publish a referral map showing how an organiser or staff recipient transfers a concern to an investigative role, what moves with consent, how urgent action is separated from later review or how duplicate contacts are consolidated. An unpublished handoff is not proof that no arrangement exists; it is simply not fully defined by the public rule.

The powers named in the Code should be separated carefully.

Reception is the act of hearing or receiving a concern. An organiser or staff member may be an accessible first contact without becoming the person who determines facts or selects a remedy.

Investigation is described as a function of the Executive Director or Ombuds. It involves examining a violation report rather than merely receiving it.

Recommendation concerns an appropriate disciplinary action or other remedy. Recommending an action is analytically different from having authority to impose it.

Implementation belongs, in the Code’s description, to the Executive Director, who is authorised to implement disciplinary action or another remedy.

Membership status reaches a separate institutional boundary. A matter appearing to warrant membership suspension or expulsion must be reported to the Board. Under the bylaws, the Board decides membership suspension, expulsion or another membership sanction.

The same institution can coordinate these roles without collapsing them. A first contact need not investigate. An investigator may recommend a step that another officer implements. Informal assistance may close without a sanction. A membership-level consequence enters a narrower Board procedure that cannot be assumed for every event or digital-space action.

The NANOG 90 material adds detail to the described path. It sketches report, investigation, consent-based mediation and possible closure, with a route toward more severe action such as an event ban. It says an anonymised report goes to executive leaders of the Board and that the Executive Director is briefed if removal is recommended.

Again, each statement answers a limited question. An anonymised awareness report describes an institutional learning or oversight route; it does not show the underlying case or a Board decision. Briefing the Executive Director if removal is recommended describes an escalation point; it does not establish that any removal occurred. A diagram of possible flow is not a case register.

The map prevents two common errors: mistaking a reporting address for a remedy and turning the Ombuds into a tribunal because the role can investigate, facilitate or recommend. The remaining uncertainty concerns definitions, handoffs, timing, conflict handling and aggregate outcomes—not the existence of any public institutional structure at all.

Confidentiality is operational infrastructure

The strongest argument against a detailed public conduct record begins with the people whose trust makes the route usable.

NANOG is a professional community in which entities may meet repeatedly across employers, events, technical groups and digital spaces. Removing a name does not necessarily remove an identity. Event, role, issue category, timing and remedy can combine into a recognisable profile. A cell saying that one volunteer at a specified meeting sought mediation involving a sponsor, for example, could narrow the possibilities sharply. The same risk reaches a respondent, witness or person who asked only for advice.

Small numbers make the problem structural. With two to five reported incidents at a covered event, disaggregation by role, location, issue and disposition can quickly reduce a group to one. A category label is not anonymity when everyone knows who occupied the category. Delay may help, but people in a close community may still remember who changed an assignment, left a room or stopped attending.

Nor can safety be judged field by field. An “event” band may look harmless, and so may a “entity role” band, while the combination identifies someone. Publication design must test the full mosaic a knowledgeable reader could assemble from the table, meeting programme and professional context. This is why exact cells, role-event combinations and longitudinal trails are dangerous even when no single field contains a name.

Disclosure can also amplify the original harm. A public narrative may circulate an allegation far beyond the underlying interaction, invite speculation, enable retaliation or affect employment and professional relationships. The person who sought help may lose control of a story disclosed in confidence. A respondent may be publicly judged through a process never designed for public adjudication. Witnesses may decide that helping carries too much risk.

Legal exposure is only part of the concern. Even a legally defensible disclosure can violate the functional promise that made reporting possible. The Code says reports will be handled in strict confidence. The Ombuds page describes confidential communications and says staff and Board are not copied on exchanges between community members and the Ombuds. If the public accountability design made later disclosure predictable at case level, the intake route could become less usable.

Some matters should therefore leave no public trace beyond a protected aggregate. Where even aggregation is unsafe, the only responsible entry may be a note that the field was withheld. That is not concealment by default. It can be the condition under which someone is willing to seek help, explore options or resolve a problem without enlarging the exposure.

Informal resolution makes the boundary still more important. Mediation can work because parties consent to a private process, speak without performing for an audience and consider solutions that a public decision-maker could not impose. Its value may lie in restoring a workable relationship or ending an immediate problem, not producing precedent. Converting every mediation into a public story would change the institution being offered.

Opacity has its own cost. If everything disappears behind confidentiality, the public cannot tell whether the route is used, acknowledgements are timely, severe matters reach the appropriate authority or systemic recommendations vanish. A claim of confidentiality can protect institutional inaction as effectively as it protects reporters if the two purposes are never separated.

The answer is minimum sufficient accountability. Definitions can be public without cases; time bands without dates; broad remedy categories without individual sanctions. Systemic recommendations can be counted by status without revealing what gave rise to them. Small cells can be suppressed, publication delayed and reasons for non-publication stated.

That standard is harder than either a public docket or total silence. It requires the institution to decide which information serves accountability, which combinations create re-identification risk and which omissions should themselves be visible. It also accepts an uncomfortable truth: the most responsible report may disclose less than an external reviewer would prefer.

Informal help without borrowed judicial power

NANOG describes its Ombuds as neutral or impartial, confidential, informal and functioning independently. The same current page says the role has no formal decision-making authority or disciplinary responsibility. It mentions facilitated communication, recommendations, mediation and a possible role in identifying systemic issues.

Taken together, those descriptions outline influence without an ordinary power to impose a binding result. An Ombuds may help a person understand options, facilitate communication, recommend an institutional response or surface a recurring concern. Informality does not make the service trivial. A confidential person who can listen, clarify and help negotiate a safe next step may be more useful in some circumstances than an immediate formal proceeding.

Informality must nevertheless remain visible. A recommendation is not an order. Mediation is not a finding that an allegation was proven. Agreement by parties is not the same as an institutional determination of responsibility. A person may report feeling better served without the process establishing what happened to an evidentiary standard.

The page also says that neither staff nor Board are copied on communications between community members and the Ombuds, while the lead Ombud reports directly to the Executive Director. The statements can coexist. Confidential case communication, administrative reporting and escalation are separable channels. A lead might report on resources, aggregate concerns or operating needs without disclosing private exchanges; a recommendation involving removal may require a defined escalation.

The reviewed page does not publish enough structure to define those channels completely. It does not set out appointment protections, contract terms, tenure, resources, recusal rules, referral practice, aggregate caseload, recommendation acceptance or the precise meaning of direct reporting. Missing detail is not evidence of dependence, ineffectiveness or conflict. It identifies what a public charter or aggregate record might clarify safely.

The historical snapshots show change without explaining it. Public member-meeting material in February 2022 described a three-person Ombuds team as impartial, confidential and informal, focused on procedural fairness and able to identify systemic issues. The current page records a later lead appointment effective 1 October 2022. Roster change does not tell us whether capacity increased or decreased, why the model changed or how work was redistributed.

The institutional distinction is between access to help and authority to decide. The Ombuds route can lower the threshold for confidential assistance. Executive Director implementation and Board membership powers occupy other positions. If the positions blur, informal help can appear more coercive than described, while formal decisions can appear to have received protections that actually belong to another path.

A proportionate public account should therefore preserve the Ombuds function’s character. It could describe the current appointment structure, available resources, recusal arrangements and aggregate referral categories without evaluating a named office-holder. It could report whether recommendations were accepted, deferred or not adopted in broad bands, while withholding the cases that gave rise to them. Such information would make institutional response visible without turning informal help into pseudo-adjudication.

Hearing the outcome language at its proper volume

The NANOG 90 opening material goes beyond the two-to-five range. It says the Ombuds worked with every reporter to ensure the person was safe and heard, that most cases were scheduled for mediation and that all parties reported a positive outcome.

These are consequential institutional claims, and they should be attributed as such. They indicate how NANOG publicly described the purpose and reported result of the Ombuds work at that point. They do not become independently verified findings merely because they appear in meeting material.

“Safe and heard” might refer to immediate conditions, quality of the conversation, access to options or the reporter’s own assessment. The reviewed public record supplies no recurring definition, observation point or follow-up interval. The phrase cannot therefore establish enduring safety, absence of recurrence or every later consequence.

“Most cases” supplies a proportion word without the underlying count. The two-to-five band is per covered event, but the slide does not state the number of events, the total cases or whether “incident,” “report” and “case” are identical counting units. Without those definitions, a reader cannot reconstruct the denominator behind “most.”

“Mediation” requires similar care. The slide describes a consent-based process. Scheduling does not establish that a session occurred, reached agreement or produced a formal remedy. A positive outcome reported by parties need not mean that no violation occurred, that everyone received the same remedy, that recurrence was impossible or that the assessment remained positive after a longer interval.

None of this language should be stripped of meaning. Reporter perception matters. Being heard can be a material outcome when someone is uncertain, isolated or seeking options. Consent-based mediation can resolve a problem. Positive feedback from parties is useful to an institution evaluating an informal service.

The boundary is measurement. A stable series would need to explain what was counted, when the outcome was recorded, whether follow-up occurred and how non-response was treated. Those methods can be public even when cases are not. Until then, the 2024 statements remain valuable but bounded institutional self-descriptions.

This restraint works both ways. The absence of a recurring definition does not establish that outcomes were poor. The absence of a public case file does not imply concealment. The existence of positive reported outcomes does not prove universal effectiveness. A fair account carries the claim at exactly the weight NANOG’s public material can support.

Membership discipline at the outer edge

NANOG’s current bylaws define a membership-specific procedure. They allow suspension or expulsion where conduct is materially and seriously prejudicial to NANOG’s purposes and interests, including Code violations. The procedure provides 15 days’ prior notice and an opportunity to be heard orally or in writing at least five days before the proposed effective date.

The Board decides whether membership suspension, expulsion or another membership sanction should occur, and the bylaws describe the Board’s decision as final. They also provide a six-month period for bringing a challenge to a membership expulsion, suspension or termination.

These protections and powers matter because a membership sanction changes formal status. Notice and an opportunity to be heard create a procedure unlike immediate venue management or private mediation. Board decision-making places the final membership consequence outside the Ombuds function’s stated lack of formal disciplinary authority.

The scope is narrow. These membership provisions cannot be imported into every warning, mediated agreement, event removal, sponsor-related remedy or digital-space restriction. A non-member entity may fall within the Code while having no membership status to suspend. Urgent venue action may follow another timetable. Private informal assistance may involve no sanction at all.

The reviewed public sources do not establish that the Board used these provisions to suspend or expel a member. The bylaws prove the stated path and available institutional power, not an instance of use. Likewise, the presence of notice and hearing language for membership does not prove a complete review route for every other remedy.

This distinction matters for both fairness and public explanation. If aggregate reporting refers to a “formal remedy,” readers need to know whether that means event exclusion, sponsor action, digital restriction or membership discipline. Combining all of them into a single sanctions count would hide important differences in decision-maker, procedure, duration and reversibility.

It also matters to people seeking help. An Ombuds conversation should not be represented as the beginning of an inevitable disciplinary ladder if the function is described as informal and consent-based. At the same time, a matter that reaches a membership consequence should not borrow the language of informal resolution to obscure the Board’s formal role.

The control map is strongest when each power keeps its own name.

A chronology of attention without a causal verdict

NANOG’s public material permits a limited chronology of institutional attention. It does not supply a before-and-after evaluation.

The 2019 annual report said NANOG updated its Code of Conduct, usage guidelines and travel policy while developing a community-facing website and surveys. That establishes policy-development activity, but not a provision-by-provision change history, the reason for each revision or any enforcement outcome.

In February 2022, member-meeting material described the three-person Ombuds team, its informal and confidential character, focus on fairness of process and ability to identify systemic issues. The current page records the lead appointment later that year. These are institutional snapshots, not capacity measures.

NANOG 87 community material in February 2023 described a DEI Committee responsibility to bring Ombuds feedback and observations into strategic or policy consideration by the Board. The description sketches a route from confidential experience to institution-level learning. It does not establish that a particular observation travelled along it, that a recommendation was adopted or that policy changed.

Public Board minutes from October 2023 show preparation for recognition of the Ombuds and Code messaging at NANOG 89. Separately, an ambassador-programme discussion identified Code clarity as relevant. These are records of preparation and a recognised control dependency, not incident findings, completed training or proof of an implemented policy amendment.

The NANOG 90 material in February 2024 then supplied the two-to-five range, outcome language and a described escalation path. It made activity more visible at a particular meeting. But chronology cannot prove that the system improved between 2019 and 2024. The later detail could reflect better disclosure, changed practice, a different presentation purpose or several factors together.

The current bylaws, with amendments adopted in November 2025, make the membership-discipline path visible in its present form. That constitutional text is another layer of the control map, but it does not fill the missing aggregate record for informal help, event actions or digital-space remedies.

A serious account of organisational learning needs more than successive documents. It needs a way to observe whether systemic recommendations were made, considered and acted upon. The recommendation itself may need to remain broad to protect cases. Status—issued, accepted, deferred or declined—can often be published without revealing its source.

The distinction protects against treating attention as effect. A committee remit shows where information could go. Board preparation shows that a topic received attention. Revised policy shows that text changed. None alone identifies the experience that drove change, demonstrates implementation or proves that future problems became less likely.

The annual-report gap and the private record

NANOG’s 2024 annual report publishes detailed measures on meetings, attendance, committees and programmes, including the remit of a Community Engagement Committee. A text search of the reviewed document found no Ombuds, Code-of-Conduct or incident series.

The omission is an observation about one public report. It is not evidence that no Ombuds work occurred, and it does not negate the NANOG 90 description of anonymised reporting to Board executive leaders. A protected report may exist without appearing in an annual publication; policy action may occur without a public case account.

The contrast remains useful. NANOG publishes recurring operational and programme measures, while the reviewed annual-report layer carries no stable conduct-accountability series that a reader can reconcile with the NANOG 90 range. This is a gap between public reporting layers, not proof of an empty protected record.

There may be good reasons for the difference. Attendance and committee counts can often be published without exposing individual vulnerability. Conduct matters may involve rare combinations of role and event, contested facts or continuing professional relationships. A recurring table that looks harmless at national scale can be identifying in a small technical community.

The relevant question is not why private case material is absent. It is whether a minimal aggregate series could be included safely and whether the institution could say when even an aggregate field cannot be published.

If NANOG already maintains richer protected reporting, the public question narrows to what can safely be projected from it. If it does not, the first step need not be elaborate. Stable definitions of a covered event, a report and a unique matter would make the existing two-to-five range far easier to interpret.

The absence of a public series should neither be used to infer inaction nor ignored as irrelevant. It identifies a place where institutional learning could become more legible without making confidential experiences public property.

A minimum aggregate record

A proportionate accountability record would begin by stating its perimeter rather than announcing a verdict.

It could identify the policy version and the physical and digital surfaces covered during the period. It could state how many events had Ombuds representation, whether year-round digital reports were included and which broad intake routes fed the aggregate. Ombuds, Executive Director, organiser or staff reception, and digital contact may be sufficient categories where publication is safe.

The counting rule should distinguish contacts, reports and unique matters. Several people may report one occurrence; one person may seek help more than once; one matter may cross an event and a digital space. The public need not see those paths, but it should be told which unit a band counts and whether the rule changed.

Totals should be reported in bands rather than exact small cells. When a band could still identify someone, suppression should replace false precision. Broad issue categories belong only where the cell is safe; event-role combinations should remain unpublished. A non-publication note can say that confidentiality or re-identification risk prevented safe aggregation without hinting at the underlying case.

Timing can also be banded: acknowledgement, initial contact, referral and closure. Definitions should explain when the clock begins, what closure means and how an inactive contact is treated. No personal timeline or event date is required.

Disposition categories should preserve institutional differences. Informal assistance, facilitated communication or mediation, referral, event or digital-space action, sponsor-related action and membership-level escalation should not be collapsed into “resolved” or “sanctioned”. Even broad categories may need suppression. A mediation band must not imply substantiation; a formal-remedy band must not reveal the respondent.

Conflict handling can be aggregated too. The record could report recusals or alternate arrangements within a safe band and describe the general process for them. That would make NANOG’s description of the role more inspectable without evaluating a named Ombuds or publishing confidential correspondence.

Institutional learning deserves a field separate from case disposition. Systemic recommendations could be grouped by broad theme, with counts or bands for issued, accepted, deferred and not adopted. A recommendation derived from several matters should not be tied back to an event. Publication may need to wait until identification risk declines, and some themes may never be safe to disclose.

Membership-level escalations should appear, if at all, in a suppressed band. The record should never publish names, employers, exact small counts, narratives, alleged facts, personal characteristics, individual sanctions, private communications or a longitudinal history from which a person can be tracked.

An accountable editorial owner should version definitions and correct the aggregate record. Counting-rule changes should be shown, not silently rewritten, because a rise or fall across incompatible methods would mislead. The notation must distinguish zero, no value collected and no safely publishable value; otherwise suppression itself becomes false data.

The record could also carry a short method note about professional-community proximity. This would explain that apparently broad categories may be withheld when they become identifying in combination with public schedules or known roles. Such a note would make uneven disclosure intelligible: the absence of one field would reflect a safety decision, not necessarily the absence of activity.

Method-level assurance could add confidence without opening a case. A protected reviewer could test whether the published band reconciles with the underlying counting rule, whether suppressed cells are treated consistently and whether an apparent year-to-year change is really a change in definition. The public output need not name a reporter, reproduce an allegation or disclose the reviewer’s access trail. It could simply state the period examined, the method checked, any limitation on the review and whether corrections were made to the aggregate.

That assurance should not be confused with adjudication or a finding that every matter was handled well. It would test the integrity of the public projection: did the band mean what the method says it meant, were unlike units kept apart and were withheld fields marked honestly? Questions about investigation quality, fairness in a particular matter or legal rights would remain outside its scope unless another protected process addressed them.

Corrections matter because a small series can be distorted by a single classification change. If contacts were once counted as incidents and later consolidated into unique matters, the historical values should not be quietly overwritten into apparent continuity. A version note could preserve the original publication, describe the revised rule and identify which comparisons are no longer valid. This is institutional memory at the method level, not a case history.

The same restraint should govern public commentary around the record. Leaders should not celebrate a low band as proof of safety or treat a rise as proof of deterioration. The surrounding explanation is part of the control: it can remind readers that report volume reflects both experience and access, and that confidentiality prevents the aggregate from carrying every answer.

This proposal is hypothetical. It neither describes NANOG’s current practice nor implies that every field would be safe every year. Its virtue is modularity: individual values can be withheld while the method remains public. The purpose is not maximum disclosure, but evidence that the route exists, is used in bounded ways and can produce institution-level learning.

Why the trend cannot grade the institution

Any recurring series will invite a simple directional verdict: fewer reports as improvement, more as deterioration. The instinct is unreliable.

Observed reports reflect at least two hidden quantities: experiences that might be reported and the probability that someone uses the available route. Attendance, policy awareness, trust, professional risk, definitions, access and Ombuds visibility can move either quantity. A rise could reflect worsening conduct, improved access or both. A fall could reflect improvement, reduced trust or a smaller covered population.

Disposition counts have similar ambiguity. More mediation could mean the service became more accessible, that cases were more suitable for informal resolution or that formal routes were avoided. More formal action could reflect more severe matters, clearer escalation or a change in classification. A shorter closure time can be welcome, but speed without context may also reflect premature closure.

The series should therefore be read through scenarios rather than a single grade. If reports rise while awareness and route visibility broaden, the institution should not assume failure. If reports fall while the covered population grows and trust indicators weaken, celebration would be premature. If systemic recommendations recur on the same theme, implementation status may matter more than intake volume.

The strongest public indicator is coherence across the control chain: a defined route, legible handoffs, protected communication, timely aggregate response, separation of informal and formal powers, and evidence that recurring themes can reach an accountable decision point.

Even that coherence does not establish the total experience of all entities. Unreported harm remains outside the series. People who avoid NANOG spaces cannot appear in an attendee denominator. Those who use another institutional or legal route may be missing. A public record can make a control inspectable without becoming a survey of universal experience.

That is why two to five should open the inquiry rather than close it. NANOG made a bounded reported-volume statement. A stable method could make future ranges more comparable and useful. No trend removes the need to know what was counted and who had reason—or reason not—to speak.

What aggregation still cannot recover

Even a careful aggregate record would leave important questions unanswered. It could show reports received under a defined rule, not the total number of unwanted-conduct experiences. It could show use of stated channels, not the share of affected people who knew or trusted them or chose another response. It could show broad dispositions without establishing substantiation, severity or every reason someone accepted or declined mediation.

The reviewed public record does not establish unique reporter, respondent or incident denominators. It does not establish response, investigation, mediation or remedy times. It does not establish repeat reports, recurrence after intervention, retaliation, or whether recommendations were accepted and implemented. It does not provide a complete appeal or review path for non-members and non-membership remedies.

Those limits should shape how a future series is described. “Reports received” is safer than “incidents in the community” because the latter can imply a complete census. “Matters closed under the reporting rule” is safer than “problems resolved” unless resolution is defined and followed over time. “Parties reported a positive outcome at the recorded point” preserves both the value of the response and the limit of the observation.

Aggregation also cannot independently verify an institution’s own characterisation of its process. A public band can be reconciled across years and checked for internal consistency, but it does not by itself prove investigation quality, legal compliance or freedom from conflicts. External review might answer some of those questions, yet it would face the same confidentiality boundary and would need protected access, a clear remit and safe public reporting.

The proposed record is therefore one accountability layer, not a complete evaluation. It can make institutional movement visible: concerns reach a defined route, powers remain separated, responses occur within stated bands and recurring themes encounter a decision. It must never imply that people who did not report had no experience, that every eligible person had equal access or that a protected aggregate captures the whole community.

Legitimacy at the scale of the control

A legible conduct process can matter profoundly to participation. Someone deciding whether to attend, speak, volunteer or engage online may reasonably ask whether the rules cross roles, help is available in confidence and serious matters can reach someone with authority to act. NANOG’s public materials answer parts of those questions.

The Code announces broad scope and possible responses. The Ombuds page describes an informal and confidential route. Meeting material describes reported use, mediation and escalation. The bylaws define a formal membership boundary. Historical documents show continuing attention to policy, communication and an avenue for systemic feedback.

The architecture supports a bounded claim of institutional capacity on NANOG’s own surfaces. It does not establish universal safety, perfect consistency or legal compliance; nor does it show that everyone knew or trusted the route, that recommendations were accepted, that retaliation never occurred or that all harm was reported.

Nor does this process grant NANOG authority over North American network operators. Attendance or use of a confidential service is not consent to regional representation. The Code governs participation in NANOG-organised spaces under NANOG’s published rules; it is not a mandate over independent networks. Even a positively reported mediation outcome would remain bounded to the institution, not evidence of continental legitimacy.

The most credible next step is deliberately small: stable definitions, protected bands, broad timing and disposition categories, conflict-handling information and systemic-recommendation status where safe. Suppression should be explained. Confidentiality should remain intact. No trajectory should become identifiable.

Such a record would not answer every question, and that is its discipline. The confidential door should remain closed to public curiosity about cases. The institution around the door—its reach, handoffs, powers, aggregate use and capacity to learn—can still become more visible.

Sources