The Candidate Vetting File Nobody May Inspect

Summary

• ARIN's published rules create three distinct records: public nominee answers, confidential personal and background-check material, and an assessment that classifies a Board nominee. Keeping the first visible and the second protected is defensible; allowing the third to determine ballot access without an intelligible account would not be.
• The current structure improves on insider judgment by assigning qualification assessment to an independent firm and limiting NomCom largely to recruitment, conflict confirmation and certification. Independence from trustees, however, does not answer consistency, evidence quality, candidate response or correction of error.
• ARIN's petition route gives a nominee rated “Not Qualified” seven days to declare an intent and fourteen more to obtain support from at least two percent of eligible General Members, with a floor of one hundred. That is a democratic override, not a full merits appeal, because members receive a summary rather than the underlying record and may be judging the assessor as much as the nominee.
• A defensible system should disclose criteria before nominations, provide each excluded nominee a confidential evidence schedule and reasoned preliminary finding, allow correction, use an independent reviewer for contested facts, publish a redacted final rationale and report aggregate outcomes after the election.

The file has more than one audience

Candidate vetting is often discussed as a choice between secrecy and publication. That framing is too crude. A nomination file contains different kinds of information serving different audiences. The electorate needs enough information to compare people who may govern a registry. The assessor needs evidence about experience, judgment, conflicts and eligibility. The nominee needs to know any adverse case that can keep them off the ballot. References need confidence that sensitive observations will not be broadcast. The organisation needs a durable record showing that the same standard was applied.

These interests overlap, but they are not identical.

ARIN's current materials already recognise part of this structure. Its nominee questionnaire page distinguishes public answers from personal contact information and requires Board nominees to agree to an independent background check. The public portion asks about qualifications, time commitment and conflicts. That information can help members decide whether a candidate understands the office. The private portion protects identifiers and material collected for verification. Neither category, by itself, captures the reasons an assessor may classify someone as qualified or not qualified.

The missing middle is the adjudicative record. It includes the standard used, evidence considered, disputed facts, the candidate's answer, any credibility judgment and the reason for the classification. Publishing every page would expose personal data and deter candid references. Hiding the whole record would ask the nominee and electorate to trust a conclusion that controls ballot access. A mature system separates disclosure by function rather than assigning one secrecy label to everything.

The candidate should receive more than the public. They cannot answer a concern they have never seen. An independent reviewer should receive more than the candidate where a reference identity genuinely requires protection, but must test whether anonymous material is corroborated. Members can receive a redacted rationale that states the criterion, decisive finding and response without identifying private sources. After the election, an audit body can inspect the complete record under confidentiality and report whether standards were consistently applied.

This layered approach is not a compromise in which everyone receives an incomplete version by accident. It is a deliberate allocation of information. Confidentiality attaches to a particular datum and risk, not to the institutional act of excluding a nominee. The more decisive the act, the stronger the obligation to preserve an inspectable explanation somewhere outside the original decision-maker.

Ballot access is a governance decision

An election begins before voting opens. If ten people volunteer but only four appear on the ballot, the act that created the slate may shape the result more strongly than the tally. Voters can choose only among names they are permitted to see. Candidate vetting is therefore not merely recruitment support or human-resources screening. It allocates access to a corporate governing office.

ARIN's Bylaws make the distinction explicit: any person may be nominated, but not every nominee becomes a candidate. Nominees submit questionnaires for review, published eligibility and conflict rules apply, and the slate must contain more candidates than vacancies. The Board approves nomination and election procedures not contained in the Bylaws. Those provisions give the institution a lawful gate. They also concentrate responsibility for describing how the gate works.

The usual defence of vetting is competence. A registry board oversees finance, risk, strategy, executive leadership and services on which networks depend. An open ballot containing people who cannot satisfy basic legal or fiduciary requirements could create avoidable harm. Background verification can detect identity fraud, undisclosed disqualifying roles or material misrepresentations. A qualifications review can test whether a nominee understands the time and responsibility involved. These are legitimate aims.

The risk lies in converting broad virtues into discretionary exclusion. Terms such as integrity, leadership, strategic judgment and professional competence are important but elastic. Two assessors can read the same career differently. A candidate from a large telecommunications company may present familiar board experience; a candidate from a small community network may show equivalent judgment through less conventional roles. If criteria reward resemblance to previous trustees, a competence screen can reproduce the existing board while appearing neutral.

That is why ballot access needs administrative-law habits even inside a private association: published criteria, relevant evidence, consistent treatment, an opportunity to answer, recorded reasons and review. These habits do not imply that ARIN is a state. They recognise that an association exercising consequential gatekeeping owes its members an intelligible basis for limiting their choice.

The election result cannot cure an opaque exclusion. A decisive victory by the eventual winner shows preference among admitted candidates, not agreement that excluded nominees were unsuitable. The electorate was never asked that question on equal information. Legitimacy must attach to slate formation as well as counting.

ARIN moved assessment away from insiders

ARIN's published design contains a significant safeguard: the Nomination Committee does not now perform the substantive qualifications assessment except for a defined conflict-confirmation role. The NomCom charter says an outside firm has sole responsibility for assessing nominee qualifications. NomCom recruits, promotes participation, confirms compliance with conflict requirements, carries the outside assessments forward without modification and certifies that the approved procedure was followed.

This division responds to an obvious bias risk. Trustees sitting on NomCom may know candidates, have worked with them or hold views about how they would change the board. Community volunteers may also belong to the same small professional networks. If those people interviewed and rated challengers directly, exclusion could be perceived as incumbent protection even when conscientiously performed. An outside assessor creates distance from immediate electoral interests.

Distance is valuable, but it is not self-validating. A firm can be independent of candidates and still depend commercially on the institution that hired it. It may bring executive-search assumptions suited to commercial boards but poorly matched to a member-governed technical association. It may overvalue polished interviews, conventional titles or North American corporate experience. It can also make ordinary factual mistakes. Independence answers who did not direct the conclusion; it does not prove that the conclusion was correct.

The 2023 Board meeting record shows why institutional design matters. Trustees discussed using an outside firm so assessments would be published without NomCom modification and insider bias would be reduced. That is a clear governance purpose. The public should evaluate the design against that purpose: whether ratings are in fact insulated from trustee preference, whether annual guidance changes predictably, and whether the assessor applies criteria suited to ARIN's stated needs.

Responsibility also remains distributed. The Board defines Bylaw provisions, approves procedures, sets conflict requirements, adopts the job description and issues guidance. ARIN selects and contracts with the assessor. NomCom recruits nominees and confirms aspects of the slate. The President, General Counsel and election officer perform later verification functions. It would therefore be inaccurate to describe an exclusion as the private decision of an outside company for which the association bears no responsibility.

Delegation should sharpen accountability. ARIN should state which questions belong to the assessor, which remain legal eligibility determinations, who can correct an assessment, and who audits the supplier. Otherwise, moving the file outside the boardroom may reduce visible bias while moving decisive discretion beyond visible institutional control.

Criteria must exist before the candidate does

The safest qualification standard is one published before nominations open. Candidates can decide whether to run, prepare evidence and resolve conflicts. Members can assess whether the standard reflects the office. Assessors cannot redefine merit after seeing who has applied. Timing is an anti-bias control.

ARIN publishes several relevant instruments: the Trustee job description, Board guidance, nominee questions, conflict requirements and assessment categories. Its election rules say a qualified Board nominee must meet job-description requirements and basic abilities, demonstrate capacity to perform the duties, meet high standards of integrity and professional competence, possess necessary education and experience, and receive a satisfactory background-check result. The guidance can also identify recommended skills for a particular cycle.

Publication alone does not eliminate ambiguity. “Necessary” experience can be interpreted narrowly or broadly. Integrity may refer to confirmed misconduct, a disputed allegation or merely an assessor's interview impression. A satisfactory background check can depend on the databases searched, jurisdictions covered and treatment of old or irrelevant records. Additional recommended skills can quietly become mandatory if assessors penalise nominees who lack them.

Every criterion should therefore have an evidence note. Legal eligibility can be tested against objective roles and term limits. Time commitment can be supported by the candidate's disclosure and current obligations. Financial competence can be evidenced in more than one way, including oversight of budgets in nonprofit or public institutions. Strategic judgment may require examples rather than a particular job title. Integrity concerns should be based on verified conduct relevant to fiduciary office, not rumour or disagreement with ARIN policy.

Annual guidance deserves particular care because it can make the desired board composition responsive to current needs. A board facing cybersecurity risk may reasonably seek that expertise. But guidance authored by sitting trustees can also define the ideal successor in their own image. ARIN should distinguish minimum qualification from portfolio preference. A person meeting all minimum requirements should reach the ballot even if another nominee better fills a desired skill gap; members can weigh the comparative advantage.

The public record should also show changes from the previous year. A redline and explanation would reveal whether a new disqualifier or assessment factor was introduced before the nominee pool formed. Stable rules are easier to trust. Necessary change is more legitimate when the institution explains the problem it addresses rather than presenting a revised standard as timeless.

Background checks require a relevance rule

Background checks sound objective because they return records. Their governance difficulty begins after retrieval. A record can be wrong, belong to someone with a similar name, reflect conduct too old to matter, arise under a legal system that criminalises protected activity, or concern a dispute unrelated to fiduciary fitness. The existence of a hit is not the same as a justified exclusion.

ARIN is right to verify identity and take board integrity seriously. Trustees oversee money, confidential information and organisational risk. The electorate should not discover after voting that a candidate misrepresented a material qualification. A professional check may be more consistent and privacy-conscious than informal searching by committee members.

The check nevertheless needs a declared relevance frame. The assessor should ask whether a finding is authentic, attributable to the nominee, materially connected to the office, recent enough to retain predictive value, and considered in context. A civil dispute with a former employer is different from a final finding of financial dishonesty. A political arrest in a repressive jurisdiction is different from a conviction for misuse of entrusted funds. A corrected public record should not continue to operate as secret adverse evidence.

The nominee must be allowed to inspect the substantive finding, subject to lawful limits, and provide a correction. This is especially important for people with transnational careers whose names and records may appear differently across jurisdictions. The assessor should document how identity was matched and why the matter bears on a published criterion. If the concern comes from a confidential interview rather than an official record, the finding should identify the alleged conduct with enough specificity to answer it.

ARIN should not retain personal data indefinitely merely because collection was once authorised. The NomCom charter states that unpublished personal data relating to nominees is destroyed after the relevant election cycle, while lessons and recommendations may be retained. That retention boundary protects privacy. It should be paired with a decision record that preserves the criterion, conclusion, response and review outcome without preserving unnecessary identifiers.

Deletion must not erase accountability. An audit can record that a background concern was verified and found material without keeping a copy of every underlying document forever. A nominee pursuing timely review needs a temporary hold preventing destruction until the challenge ends. Privacy and review can coexist if the retention schedule distinguishes raw personal material from the institutional rationale.

Confidential references are evidence, not verdicts

References can reveal how a person handles conflict, responsibility and collective decisions. They can also carry old rivalries, cultural bias and strategic opposition. In a small Internet-governance community, a referee may be a former colleague, commercial competitor, policy adversary or supporter of another candidate. Confidentiality may encourage candour, but it can also reduce the social cost of an unfair allegation.

A vetting system should never treat a confidential opinion as self-proving. The assessor should separate first-hand observation from reputation, fact from interpretation and role-specific concern from personality preference. A statement that a nominee missed three fiduciary deadlines can be checked. A statement that the nominee is “not collaborative” requires context: what decision, whose expectations and whether disagreement was principled or disruptive.

The candidate need not receive the referee's identity in every case. They do need the substance. A notice can state that two references independently alleged a specified failure during a defined period, identify corroborating records and invite an answer. If revealing the event would inevitably identify the source, the reviewer must weigh that risk against the unfairness of relying on an unanswerable allegation. Some material may be unsuitable for an exclusion precisely because it cannot be tested fairly.

Assessors should also record the selection of references. References supplied by a candidate are likely to be favourable; references chosen through the assessor's network may reproduce insider opinion. A balanced method can verify candidate-provided referees, seek role-relevant independent sources and disclose how many were contacted. It should not conduct an unlimited reputation search through people who never agreed to accountable testimony.

No adverse conclusion should rest on a single unsupported confidential view when objective verification is possible. Where multiple reports corroborate each other, the assessor should still consider whether they originate from the same dispute or faction. Apparent independence can be illusory in tightly connected communities.

The final redacted rationale can protect names while explaining the evidentiary weight. It might state that the assessment relied on documented conduct confirmed by two independent sources and the nominee's response, or that a concern was disregarded because it could not be corroborated. That level of explanation helps the candidate and electorate trust the method without converting references into public witnesses.

A rating is not a reason

ARIN's categories make comparison administratively manageable. A nominee may be classified as qualified, qualified with additional recommended skills, or not qualified under the current published system. Categories support a slate and allow the electorate to see a high-level assessment. Their weakness is compression. A label tells the reader where the assessor ended, not how it got there.

“Not Qualified” can mean several different things: an objective legal disqualification, failure to demonstrate one required ability, an unresolved background concern, limited public evidence interview evidence, or a judgment that experience does not meet the role. Those reasons differ in seriousness and correctability. A nominee facing a missing document can cure it. A nominee barred by a conflicting office can promise to resign where rules allow. A nominee accused of dishonesty needs a fair factual determination.

The reason should therefore identify the decisive criterion and evidence class. It should say whether the conclusion was mandatory or evaluative, whether the defect could be cured before taking office, and whether other criteria were satisfied. It should not disclose irrelevant personal information. A concise explanation can be rigorous: “The nominee did not demonstrate the required financial-oversight experience after interview and supplemental evidence; examples supplied concerned operational budgets without fiduciary approval responsibility.” The candidate can answer that proposition.

Reasons also expose inconsistency. If one nominee's volunteer treasury work counts while another's does not, a reviewer can ask why. If a potential conflict is curable for one person and disqualifying for another, the record must identify the difference. Without reasons, every rating can appear uniform even when its underlying standard moves.

Assessors may fear that detailed reasons invite litigation or argument. The opposite risk is larger. A bare adverse label can damage reputation because readers imagine the worst. A bounded rationale can show that the issue was role fit rather than misconduct. It can also reveal that a petitioning nominee disagrees with an evaluative judgment rather than concealing a dangerous fact.

The electorate should not receive a dossier. It should receive a fair account of why ordinary slate access was denied. A rating may remain the summary field, but a reason must be the accountable unit beneath it.

The nominee needs a chance to correct the record

Fair vetting requires a provisional stage. Before an adverse classification becomes final, the assessor should provide the nominee with the criteria applied, material factual findings and a reasonable opportunity to respond. This is not a rehearsal for public campaigning. It is quality control for a consequential decision.

Correction can be simple. An employment date may be wrong. A conflict may have ended. A background record may refer to another person. An interview answer may have been misunderstood because the question used unfamiliar corporate language. The nominee may possess documents that the assessor did not request. A short response period can resolve these errors before they become electoral controversy.

More difficult cases involve judgment. The assessor may believe a career lacks strategic oversight; the nominee may explain decisions made in a cooperative, public-sector or technical-community setting. The point is not that the candidate controls the outcome. It is that the assessor must engage with relevant contrary evidence and state why it does or does not change the conclusion.

Timing should be designed backward from slate publication. If the outside firm finishes its work on the eve of announcement, a response right exists only on paper. ARIN's calendar should reserve a defined interval for preliminary notices, candidate replies, verification and corrected findings. Nominees should know the interval when they apply and be required to remain reachable.

The exchange should be preserved in the confidential record. An auditor can then distinguish a conclusion reached after genuine engagement from one that ignored the answer. Where the candidate accepts a factual deficiency, the record can say so. Where the dispute remains, the redacted rationale should acknowledge it rather than presenting a contested inference as agreed fact.

Candidates also need access to their own public questionnaire before publication and a chance to correct formatting or accidental disclosure. Public transparency should not become a trap in which a private address or irrelevant detail is exposed because forms were handled mechanically. Accuracy serves both privacy and accountability.

A response right improves the assessor's legitimacy without transferring authority to the nominee. The final decision can remain adverse. What changes is that exclusion becomes a considered determination rather than an unexplained output from a file the affected person cannot inspect.

Petition is an override, not a merits appeal

ARIN provides a meaningful route around an adverse assessment. Under the Election Processes, a nominee excluded from the initial slate after a “Not Qualified” rating may declare an intent to petition within seven calendar days and then has fourteen calendar days to obtain support. The threshold is at least two percent of General Members in Good Standing, with a floor of one hundred. A successful petitioner joins the final slate and is identified as having advanced through petition.

This mechanism returns a decision to the membership. It recognises that professional assessment should not be an absolute veto over democratic choice. It gives a candidate with genuine community support a path to the ballot. The published summary of assessment factors also ensures that supporters are not asked to sign in total ignorance.

Yet petition is not a conventional appeal. The petitioning nominee does not necessarily receive a new merits determination by an independent reviewer. Members may support the person because they reject the standard, distrust the assessor, favour a broad ballot or simply know the candidate. Reaching the threshold proves mobilisation, not that the original rating was wrong. Failing to reach it proves neither that the rating was right nor that the candidate lacked merit.

The burden is also asymmetric. A normally admitted candidate can begin campaigning after assessment. An excluded nominee must rapidly organise at least one hundred eligible organisations while responding to a public adverse summary. Newcomers and people outside established networks face the greatest difficulty, although they may be the candidates for whom an independent review matters most. Privacy rules appropriately keep individual supporters from public exposure, but the nominee still needs enough access to the membership to make the case.

Petition should therefore remain as a democratic safety valve while a separate correction and review route addresses error. A nominee should be able to challenge mistaken identity, misapplication of a criterion or ignored evidence without proving an electoral following. The petition can then answer a different question: should members be allowed to consider this person notwithstanding the assessor's reasoned view?

ARIN should report petitions carefully. “Advanced Through Petition” is accurate, but public materials should also state that the status does not itself prove misconduct or legal ineligibility. Members need the assessor's bounded rationale, the candidate's response and the nature of the disagreement. Otherwise, the label can function as a permanent stigma even after voters select the petitioner.

Review must be independent of the original incentives

An effective reviewer needs authority, information and distance. A body that can only confirm that forms were completed cannot correct a flawed qualification judgment. A reviewer denied the evidence cannot test reasons. A reviewer appointed and directed by the same people whose preferred standard is contested may provide form without confidence.

ARIN already distributes roles among the assessment firm, NomCom, President, General Counsel and Board election officer. That distribution can support review if mandates are explicit. Factual corrections could return first to the assessor. Legal eligibility questions could receive a written determination from counsel, subject to a conflict rule. A contested evaluative exclusion could go to a small independent panel appointed before nominees are known and barred from current candidacy, trusteeship and commercial ties to the assessor.

The panel should not replace member judgment about who is best. It should ask narrower questions: Was the published criterion applied? Is the decisive fact supported? Did the nominee receive and answer the substance? Were comparable cases treated consistently? Is the remedy proportionate? If the answer is no, the panel can direct reassessment or admission to the slate.

Time limits are essential. Election calendars cannot remain open indefinitely, but speed cannot mean no review. A record-based panel can decide within days if the preliminary process was designed well. Emergency extensions should be published. A late challenge based on evidence the nominee could have supplied earlier may face a higher threshold, while newly discovered institutional error should still be correctable.

The reviewer should issue two decisions: a confidential version containing necessary personal detail and a public redacted version. The public version can describe the criterion, procedural history, result and any systemic recommendation. If the panel overturns an assessment, the original adverse label should not remain prominent without the correction.

Independence also requires budget protection. The assessor and reviewer should not be the same supplier or share personnel. Their contracts should forbid direction on individual outcomes and require preservation of records for audit. Aggregate performance, not candidate identities, can be reviewed by the Governance Committee and membership after the cycle.

The purpose is not to create a miniature court. It is to ensure that the institution can detect and repair a consequential error before asking members to accept a restricted slate.

Aggregate disclosure can reveal bias without exposing people

Individual confidentiality does not prevent institutional transparency. ARIN can publish annual statistics showing how many people were nominated, completed the required materials, were found eligible, received each assessment category, sought correction, petitioned, reached the threshold and ultimately appeared on the ballot. It can break down stages without naming excluded people who did not choose publicity.

Careful aggregation can test whether the gate behaves as intended. If nearly every nominee is qualified, members can ask whether the expense and intrusion of assessment are proportionate. If exclusion rises sharply after a guidance change, the Board should explain why. If one criterion produces most adverse ratings, perhaps the job description or recruitment message is unclear. If factual corrections frequently reverse findings, supplier quality needs attention.

Demographic reporting requires caution because small numbers can identify individuals and self-reported categories may be incomplete. Broad, multi-year trends may still reveal whether candidates from smaller organisations, different parts of the service region or nontraditional careers disappear at the assessment stage. The aim is not a quota inferred from tiny samples. It is detection of a gate that consistently narrows diversity beyond what published requirements explain.

ARIN's NomCom is charged with recruitment and the slate must exceed vacancies. Aggregate data can show whether recruitment reaches beyond familiar circles and where nominees leave the path. It can also separate voluntary withdrawal from adverse assessment. Without that distinction, a small slate may be attributed to lack of interest when qualified people were screened out or discouraged by the process.

The annual report should include lessons accepted or rejected by the Board, with reasons. The NomCom charter provides for an end-of-cycle report and retention of recommendations. Publishing a redacted institutional version would let members see whether recurring problems lead to change. Confidential recruitment discussion can remain protected.

Transparency becomes useful when it allows comparison across years. Stable definitions, versioned criteria and a short methodology note matter more than a decorative chart. Members should be able to ask whether reforms reduced unexplained exclusion, improved response time or broadened credible candidacy. Those are governance outcomes, not private details.

Consistency is measurable only if decisions are retained

Equal treatment cannot be established from one file. An auditor must compare how the same criterion operated across candidates and years. That requires a structured decision record even after raw personal information is destroyed.

The retained record can be minimal and privacy-preserving: criterion identifiers, evidence classes, whether facts were disputed, whether a response changed the outcome, assessment category, review result and dates. It need not preserve passport copies, addresses or named confidential references. Pseudonymous case identifiers can permit comparison while restricting re-identification to an authorised custodian during the challenge period.

Consistency does not mean identical outcomes. Two nominees with superficially similar careers may provide different evidence. The assessor should be able to explain the material distinction. A comparison audit asks whether differences correspond to published criteria rather than familiarity, employer prestige or communication style.

Version control is crucial. A candidate assessed under one year's guidance should not be compared mechanically with a later candidate under revised requirements. The record should identify exactly which Bylaws, charter, job description, guidance letter, questionnaire and conflict list applied. If a rule changed during the cycle, the audit should flag it.

Supplier transitions create another risk. A new firm may interpret existing words differently. ARIN should calibrate assessors using anonymised hypothetical cases and record interpretation notes before live nominations arrive. It should never share previous candidates' unnecessary personal information merely to train a replacement. The goal is a common understanding of standards, not replication of every historical judgment.

An independent annual audit can sample files and report error types: unsupported findings, limited public evidence notice, inconsistent evidence thresholds, missed conflicts or unnecessary data retention. Findings about an identifiable nominee should remain protected unless the person chooses publication. Systemic recommendations belong to the membership.

Destroying all reasoning after the election would make privacy absolute at the cost of institutional learning. Keeping every raw detail indefinitely would make accountability an excuse for surveillance. A carefully designed decision register avoids both errors. It preserves how power was exercised without preserving more about the person than governance requires.

The electorate needs context, not insinuation

When an excluded nominee petitions, members must decide whether to support ballot access. A vague notice can distort that decision in opposite directions. If ARIN publishes only “Not Qualified,” some voters may infer serious hidden misconduct. If it publishes no assessment at all, others may treat petition as a routine alternative nomination. Neither provides a fair basis.

The public summary should identify the type of issue and its status. It can state that the assessor found limited public evidence evidence of a required skill, that the nominee disputes the interpretation and that no legal or integrity disqualification was found. Or it can state that a conflict rule applies, that the nominee proposes resignation if elected and that the question is whether the cure satisfies the rule. Where a verified integrity concern is decisive, the summary must remain factual and proportionate.

The nominee should be allowed a response of comparable prominence and length. Members are capable of evaluating a structured disagreement. The assessor's conclusion should not be treated as neutral fact while the candidate's answer is relegated to campaign advocacy. Both should link to the published criteria.

ARIN should also explain the petition standard. Supporting ballot access is not the same as endorsing the candidate in the election. A member may believe the electorate should decide while ultimately voting for someone else. Making that distinction explicit reduces the reputational pressure on organisations considering a petition.

After a successful petition, the final voter guide should not repeatedly foreground the adverse label beyond what informed choice requires. The candidate should appear with the same questionnaire and campaign opportunities as others, accompanied by a concise link to the assessment dispute. The election should not become a referendum on hidden insinuation.

If no petition occurs, ARIN can protect the nominee's privacy by limiting public identification. Aggregate reporting can count the exclusion. A person who does not seek public office after the adverse decision should not be permanently searchable through a sensitive assessment. The organisation's accountability need not depend on naming every unsuccessful applicant.

Context is the discipline that allows privacy and democracy to coexist. It tells members enough to understand institutional action without inviting them to imagine what the protected file might contain.

The Board remains accountable for the gate it designs

The outside assessor makes an assessment, but ARIN's Board creates the institutional conditions. It approves the election procedures, defines conflicts, maintains the job description, issues annual guidance and oversees the committee structure. It cannot claim the legitimacy benefit of independent assessment while disclaiming responsibility for foreseeable defects.

Board accountability begins before procurement. The contract should translate public commitments into enforceable duties: use only approved criteria, disclose evidence to nominees where lawful, permit correction, protect data, document reasons, meet deadlines, cooperate with independent review and report aggregate performance. Commercial confidentiality should not conceal these governance terms.

Trustees serving on NomCom need clear recusals. The charter says knowing a nominee or holding an opinion about fitness is not automatically a conflict, while material business relationships should be disclosed and may require recusal. That distinction is practical in a connected community, but the record should show when a recusal question was considered. Silence cannot demonstrate impartiality.

The Board should receive systemic reports, not confidential gossip about individual nominees. Trustees do not need access to every private interview to oversee supplier quality. Where legal responsibility requires access, it should be logged and limited. Sitting trustees who may face election should not gain informational advantages about potential challengers.

Members should be able to propose changes through established governance channels. A post-election session can review the number of nominations, assessments, petitions, corrections and appeals. The Board should answer recommendations in public minutes. Revisions should occur before the next nomination period, not after the field is known.

Accountability also includes admitting uncertainty. No assessment can perfectly predict board performance. ARIN should describe vetting as a threshold check, not certification that admitted candidates will be excellent trustees. Members retain responsibility for comparative judgment, and later board evaluation must examine actual conduct.

Delegation succeeds when it reduces conflicted discretion while leaving a traceable chain of responsibility. The outside firm should be independent in individual judgment; the Board should remain answerable for whether the system is fair, reviewable and aligned with member choice.

A file architecture for defensible vetting

ARIN can make the process inspectable without creating a public archive of sensitive lives. The first layer should be a public rules file: Bylaws provisions, current charter, job description, guidance letter, questions, conflict rules, assessment definitions, calendar, petition threshold and review procedure. Every document should carry an effective date and stable archive link.

The second layer should be the nominee-controlled file: submitted answers, identity-verification status, evidence supplied, interview record, adverse factual notice, response and corrections. The nominee should be able to obtain this material in a usable form, subject to necessary protection of third parties. Access should be logged.

The third layer should be a restricted evidence file: background-check documents, confidential reference identities and security-sensitive verification. Access belongs to named assessors and reviewers under retention limits. Every item should state source, date, relevance and whether it was corroborated. Unused material should not migrate into the decision record.

The fourth layer should be the reasoned decision: applicable criteria, findings, evidence categories, candidate response, assessment and review outcome. A confidential version can contain necessary detail. A redacted public version should be prepared for any exclusion that enters a petition or other public challenge.

The fifth layer should be an anonymised audit register. It supports consistency checks, annual statistics and supplier evaluation after raw personal material is destroyed. The register should not become a permanent shadow profile available for unrelated appointments.

Each layer needs a custodian and deletion rule. A candidate should know where to request correction. The election officer should certify that required stages occurred, not merely that the final slate exists. The reviewer should be able to place a temporary hold on deletion. After the cycle, ARIN should confirm destruction of personal material scheduled for removal.

This architecture turns “the vetting file” from a single locked folder into a set of accountable records. Some are public because rules must be known. Some are private because people deserve protection. One remains independently inspectable because institutional power must be reviewable. The design follows purpose rather than reflexive secrecy.

What nobody may inspect is what nobody can verify

The title of this problem is deliberately uncomfortable. A candidate file should not be open to everyone. Passport copies, contact details, background reports and confidential reference identities have no place in ordinary public debate. The danger begins when protection of those materials expands into a claim that no affected person, reviewer or member can inspect the reason an election choice disappeared.

ARIN has built stronger safeguards than a committee simply choosing its preferred slate. Published rules define roles. An independent firm assesses qualifications. NomCom's charter limits substantive assessment and requires outside ratings to be carried without modification. Public questionnaires give members information. The petition process can restore a nominee to the ballot through demonstrated support. These are material protections, not cosmetic ones.

They still require connection. Independence without reasons can hide inconsistent judgment. Reasons without candidate access can repeat error. Candidate access without timely correction can become ceremonial. Petition without a merits review can reward only those who already possess a large network. Confidentiality without aggregate audit can prevent the membership from seeing whether exclusions are exceptional or structural.

The correct principle is proportional inspection. The public inspects rules, categories, aggregate outcomes and redacted reasons when exclusion becomes a public dispute. The nominee inspects the case they must answer. An independent reviewer inspects the complete relevant record. Auditors inspect consistency while protecting identities. No one receives unrestricted access merely from curiosity or political interest.

This arrangement also protects assessors. A reasoned record can show that a difficult decision followed the approved standard and considered the nominee's answer. It can rebut pressure from factions seeking admission of a favoured person. Accountability is not a presumption that every exclusion is abusive; it is the evidence by which a justified exclusion can be distinguished from an arbitrary one.

Registry boards exercise power over resilient institutions, substantial budgets and services that network operators cannot casually replace. Members are entitled to set serious thresholds for trustees. They are also entitled to know that threshold-setting has not quietly become successor-selection by incumbents, suppliers or a small committee.

The candidate vetting file does not need sunlight on every page. It needs windows placed where power changes hands: at the criterion, the adverse fact, the response, the reason, the review and the aggregate result. When those windows exist, confidentiality protects people. When they do not, it protects the decision from scrutiny.