Summary

  • AFRINIC's crisis electorate depended on several different records: legal membership, resource-member status, current standing and fees, corporate authority, designated voters and the voting provider's authenticated accounts. Treating them as one “voter list” hid the decisions that created or removed a vote.
  • The board vacuum made data custody constitutional. The receiver and secretariat could not restore member control without using records maintained by the institution whose supervision and leadership the election was meant to rebuild.
  • After the June 2025 election, the receiver cited suspected irregularities involving voter documentation, especially powers of attorney, while expressly saying investigations had not reached final conclusions. The September process replaced proxies with direct designation and additional identity checks, but stronger front-end verification did not by itself prove the underlying member roll was complete or unchanged.
  • AFRINIC published a provisional and final register for the September vote, then added four designated voters on the basis of late confirmations while saying no new applications had been accepted after the deadline. That may be a legitimate distinction, but only a dated change record can make the distinction independently testable.
  • A defensible crisis election requires an independently reconciled eligibility snapshot, immutable change history, reasoned correction process, privacy-preserving publication, individual inclusion notices, separation of staff and election roles, and a sealed final roll whose exceptions are visible before ballots open.

The ballot began in the membership data

The most consequential act in AFRINIC's 2025 board election did not happen when a voter pressed a button or deposited a ballot. It happened earlier, when the institution decided that an organisation was a member entitled to vote, that its standing was current, that a particular human could speak for it, and that the person's credentials matched the record. Every ballot depended on those propositions.

That is true in ordinary association elections, but the AFRINIC setting made it acute. By 2022, litigation and expiring terms had left the board unable to exercise ordinary authority with an uncontested quorum. Courts and, later, a receiver became central to the route back to an elected board. The election was supposed to restore supervision over the company. Yet the electorate had to be assembled from membership, contractual, billing and contact records held by the company during the interval of weak supervision.

The resulting circularity is not proof that the data were manipulated. It is a control problem. The institution that would be governed by the result also supplied the facts deciding who could produce that result. Staff had the technical knowledge needed to interpret old accounts, member classes, fees and registered contacts. The receiver had court-derived authority to organise the restoration. Election bodies had procedural duties. Vendors handled ballots or identity checks. Unless their roles were separated and their changes preserved, legitimate administrative judgment could be indistinguishable from electoral control.

“The member register” is therefore not a clerical expression. In a company limited by guarantee, membership has legal significance. Under AFRINIC's constitution, member class determines notice, meeting and voting rights. During institutional vacuum, the register becomes the gate through which the institution returns to ordinary authority. Whoever can alter the gate can alter the electorate without touching a ballot.

The integrity question is not simply whether every name on a published list belonged there. It is whether every inclusion, exclusion, status change and voter designation can be reproduced from evidence by a reviewer who did not make the original decision.

There were at least four registers, not one

Public discussion often uses “member register”, “voters register” and “contact database” as if they were interchangeable. They answer different questions and should remain separate.

The first is the legal register of members. Mauritius company law gives membership in a guarantee company formal meaning: a member is a person entered in, or entitled to be entered in, the register. AFRINIC's constitution defines the company as private and limited by guarantee. Legal membership is therefore not created merely by appearing in an election spreadsheet.

The second is the operational membership record. It contains the entity's service relationship, Registration Service Agreement, allocated or assigned resources, billing state, organisation identity and contacts. AFRINIC's constitution says a Resource Member completes cumulative formalities: justified need for number resources, a signed agreement and payment of relevant setup and membership fees. This record supports services as well as voting, so it continues to change for legitimate operational reasons.

The third is the eligibility roll for a particular election. It applies the governing cutoff and rules to the first two records. The 2025 guidelines defined eligible Resource Members in good standing by reference to completed formalities, current membership and paid fees, and also used a date tied to the court-supervised restoration. Eligibility is a derived legal and administrative conclusion, not a direct copy of one field.

The fourth is the designated-voter register. A corporate member acts through a human. The September process required one designated voter, an executive authorisation, corporate-domain contact details and identity material, followed by platform authentication. This layer answers who may cast the member's vote, not whether the organisation is a member.

A fifth record sits at the edge: the ballot provider's activated accounts and vote receipts. It should contain only those eligible designated voters who completed the required checks. It should not become the place where membership is decided. A voting vendor can authenticate a face or credential; it cannot determine whether a disputed company satisfied AFRINIC's constitutional membership conditions.

The layers should reconcile but never collapse. If a person appears on the platform but the organisation lacks an eligibility decision, there is an exception. If an eligible member has no designated voter, that is non-participation or a failed designation, not absence from membership. If a fee payment arrives after the cutoff, the eligibility rule must decide its effect before platform access changes.

This layered model makes dispute precise. A complaint can challenge legal membership, good standing, corporate authority, identity verification or ballot access. Each challenge goes to the evidence and decision-maker competent for that layer.

The vacuum changed the custodian problem

Under ordinary governance, directors supervise executives, approve election arrangements and remain answerable to members. Internal staff maintain records under a chain of delegation. The audit and election committees can escalate concerns. A functioning board can resolve unusual cases or seek directions.

During AFRINIC's vacuum, those assumptions weakened. The 2023 Supreme Court judgment concerning the board without quorum recorded the claim that only three directors remained and that ordinary board decisions could not proceed. The court declined the proposed appointments on the record before it, stressing member rights and unresolved issues. In 2024, the Court of Civil Appeal restored the receiver order and addressed authority to act in AFRINIC's name. The route to a new board therefore depended on exceptional authority rather than routine board supervision.

The receiver could lawfully exercise powers within the appointment and relevant orders. That authority did not turn historical membership data into neutral fact. The receiver still depended on secretariat systems, billing records, archived agreements, staff explanations and court decisions. The secretariat had expertise but also institutional proximity. Members and litigants could have competing positions about status. The election committees could supervise procedure without possessing independent knowledge of every account.

This is the classic custodian problem: the person responsible for preserving a record may also be affected by how the record is interpreted. The answer is not to assume bad faith. It is to constrain discretion with replayable evidence and outside review.

Every eligibility decision should therefore identify its source facts, rule version, cutoff, reviewer and approval. Staff can prepare the file but should not finally decide a contested inclusion. The receiver can establish a procedure but should not be the sole reviewer of decisions that affect the perceived legitimacy of the receiver's own restoration effort. Election bodies can certify a roll only after an independent assurance function reconciles the underlying records.

The vacuum also increases key-person risk. A long-serving employee may know why an old entity name maps to a current account, why a balance is disputed, or how a merger was handled. That knowledge is valuable and limited public evidence. Oral memory should lead to documents, not replace them. If the electorate cannot be reconstructed after that employee leaves, the member register is not an institutional record.

Eligibility was a calculation with legal consequences

The September 2025 rules supplied a more definite eligibility expression than the phrase “all members”. An organisation had to be an eligible Resource Member, have completed specified membership formalities before the relevant historical date, remain current and have paid fees due. Only then could it designate a voter.

Each element contains judgment. Legal-entity identity may change after merger, acquisition, insolvency, reorganisation or name change. A signed agreement may exist in an old company name. Resources may have moved through an approved transaction or become disputed. Membership may be current in one system and flagged in another. A payment may be in transit, allocated to the wrong invoice, under a credit arrangement or contested. A court order may preserve status despite an administrative termination. A receiver may inherit unresolved cases from the period when no quorate board could decide them.

Good standing is therefore not a colour attached to an account. It is a conclusion as of a defined moment. A reproducible calculation would identify:

  1. the legal entity and stable membership identifier;
  2. the class of membership and evidence of admission;
  3. the governing agreement and any approved succession;
  4. the current membership-status event;
  5. invoices due before the cutoff, payments and authorised arrangements;
  6. court orders or disputes affecting status;
  7. the rule version and cutoff applied; and
  8. the final eligibility reason code.

The result should be one of several states, not only yes or no. Eligible is clear inclusion. Ineligible is a reasoned exclusion under an identified rule. Pending evidence is an unresolved file that must be completed before the challenge deadline. Disputed is a case requiring independent decision. Eligible under preservation order is a member whose status is maintained by a court or agreed standstill. These states prevent uncertainty from being silently converted into exclusion.

The calculation must also be symmetrical. The institution should search for members wrongly omitted, not only suspicious applicants seeking entry. An election administrator naturally sees the person who submits a form. The invisible constituency consists of organisations that never received notice, could not access old contacts or did not know they were eligible. Integrity includes completeness as well as fraud prevention.

The June crisis exposed authority-document risk, not a proven conspiracy

The receiver's July 2025 notice said that suspicions of irregularities had arisen in the 23 June election, particularly around powers of attorney. It said complaints had been submitted and police were investigating. It also said that, because final conclusions were absent, the receiver could not report the full extent of irregularities. The results were annulled and a new election was planned.

Those statements establish the receiver's concern and response. They do not establish that a named voter, employee, candidate or member committed fraud. They do not show how many documents were affected, whether any ballot result changed, or which control failed. “Irregularities” is a reason to preserve and investigate, not a substitute for findings.

The first process had to evaluate several forms of representation. A corporate body could act through an authorised person; proxy and power-of-attorney documents introduced further chains of authority. Each chain could be valid, defective, ambiguous or forged. A document might be genuine but signed by someone without corporate power. A signatory might have authority but use a form that did not satisfy the election rules. A representative could be validly appointed for a meeting but not for a separate electronic ballot.

These distinctions show why document control matters. Verification must ask who issued the authority, what office the signatory held, which organisation was bound, what act was authorised, for which date, whether revocation occurred and how the evidence was confirmed. A stamp, letterhead or notarisation does not answer every question. Nor does an unfamiliar document prove misconduct.

The proper institutional response would preserve every submitted version, upload timestamp, reviewer note, communication, acceptance decision and later change. It would record which ballots were linked to disputed authority without exposing vote choice. An independent investigator could then determine reach and remedy.

The public record reviewed here does not contain that complete examination. This article therefore draws no conclusion about individual culpability or the material effect of the June concerns. Its conclusion is institutional: a crisis election cannot rely on authority documents without a versioned verification record and a predefined route for contested cases.

Removing proxies simplified one layer and concentrated another

The replacement process prohibited proxies and powers of attorney and moved to direct electronic voting by one designated voter per eligible Resource Member. Simplification had real advantages. It reduced chains in which one person could carry several authorities. It linked each member to one identified individual. It allowed the institution to send confirmation to known contacts and the voting provider to authenticate the person.

But every simplification transfers trust. Removing proxies did not remove representation; a corporate member still had to choose a human. The September process placed greater weight on the executive designation letter, corporate email domain, government identity and confirmations by contacts already in AFRINIC's records. Staff and the Election Committee verified the submissions. A third party performed identity checks, including facial comparison.

The new model therefore concentrated power in three places. First, the existing contact record determined who would be asked to confirm a designation. If that contact was stale, compromised or disputed, the confirmation loop could validate the wrong authority. Second, the definition of acceptable executive office determined who could designate. Corporate structures vary, and a title familiar in one jurisdiction may not exist in another. Third, staff and committee reviewers controlled exceptions, including names, domains and documents that did not fit the standard route.

Biometric verification answers a narrower question: whether the person presenting a credential appears to be the person identified by it. It does not prove that the company validly authorised that person or that the company was eligible. The more impressive the identity technology, the easier it is to overlook the prior institutional decisions.

Direct voting was therefore an improvement only if the underlying member and authority data were sound. A clean one-to-one voter table built from a flawed member table remains flawed. The redesign needed independent reconciliation beneath the new identity controls, not only stronger controls at the platform edge.

The provisional register was a necessary but incomplete control

The September timetable published a provisional voters register on 29 August and a final register on 5 September. That sequence created a correction interval, which is better than revealing the electorate only when voting opens. Members could inspect whether an organisation and designated voter appeared and raise discrepancies.

Publication, however, does not prove that every eligible organisation saw the list. A member with a stale email, absent representative or internal transition may never know it was omitted. A public page shifts some burden to members, but the institution still controls notice and knows which accounts did not complete designation.

A strong provisional-roll process uses three channels. The first is public publication of the minimum information necessary to identify included organisations. The second is direct notice to every organisation classified as eligible, excluded, pending or unresponsive. The third is an individual verification receipt allowing each member to confirm its own underlying status and designation without exposing private material.

The published register should be accompanied by denominators. How many Resource Members were examined? How many were eligible? How many received notice? How many opened or acknowledged it? How many submitted designations? How many were rejected, pending or challenged? How many completed platform activation? A list of successful entries alone cannot reveal whether a quarter of the electorate remained outside it.

Reasons matter too. Aggregate reason codes can show exclusions for arrears, late submission, unresolved corporate authority, identity mismatch, duplicate designation or other rules. They should not disclose sensitive account details. The distribution lets members and a reviewer detect whether one rule was applied unusually often or unevenly across regions.

The provisional stage is not public relations. It is an adversarial control. Its value lies in exposing errors early enough to correct them and leaving evidence of how each challenge was handled.

Four late confirmations made the change-history question concrete

AFRINIC's final-register page said no discrepancies had been reported after publication of the provisional register. It later said the final register was updated to include four additional designated voters based on late confirmations from nominating executives. The page emphasised that no new applications were accepted after the 26 August deadline.

There is a plausible administrative distinction. An organisation may have submitted an application on time while the executive's confirmation arrived later. Adding the voter would then complete an existing case rather than accept a new application. The official explanation is consistent with that possibility.

The same event demonstrates why a change log is indispensable. Without it, an outside reviewer cannot verify when each underlying application arrived, what was missing at the deadline, which rule allowed later confirmation, who approved the exception, whether similarly situated members received the same chance, and when the public register changed. The issue is not suspicion about the four voters. It is whether the rule can be applied and audited without relying on trust in the announcement.

Every change between provisional publication and ballot opening should create an immutable event with:

  • the member's stable identifier;
  • the previous and new eligibility or designation state;
  • submission and confirmation timestamps;
  • the rule and reason code;
  • evidence references protected from public disclosure;
  • the preparer and independent approver;
  • notice sent to the affected member;
  • any challenge and decision; and
  • the version of the public and platform registers affected.

The event should never overwrite the old state. A corrected spelling, replaced voter or newly allocated payment must remain visible in history. If a data-protection rule requires deletion of an identity document, the system can retain a verification result, date, reviewer and cryptographic digest without retaining unnecessary personal material indefinitely.

The final roll should then carry a version identifier and integrity proof. The voting provider receives exactly that version. Any mandatory exclusion after freezing, such as loss of membership status under a binding event, requires a separately logged exception visible to the certifier. A quiet spreadsheet edit must not be capable of changing the electorate.

“No discrepancy reported” needs a denominator

An absence of complaints can mean the list was accurate. It can also mean omitted members did not receive notice, the challenge window was too short, the procedure was unclear, or the cost of contesting exceeded the perceived value of a vote. The phrase is informative only when paired with outreach and response data.

The September schedule left several days between provisional and final publication. Whether that was adequate depends on when direct notices were delivered, whether weekends or time zones mattered, what evidence a correction required and how quickly AFRINIC answered. A multinational member may need internal corporate approval. A small operator may have one overworked contact. A company in restructuring may need records from another jurisdiction.

The election administrator should report delivery and response rates. Bounced messages should trigger alternative contact attempts. Accounts with no recent human contact should receive enhanced outreach through previously verified channels. Staff should not call selectively based on perceived political importance; outreach rules and scripts should be uniform and logged.

Unresponsive members remain members if the underlying rules say so. Failure to designate a voter means no ballot access for that election, not retroactive loss of membership. Reporting should preserve this distinction. Otherwise a low-participation roll can be presented as though it were the entire eligible constituency.

The denominator also disciplines claims of mandate. Results should state votes cast, activated voters, final designated voters, eligible member organisations and total member population by relevant class. Each number answers a different question. A candidate's share of ballots cast is not the same as support from all eligible members.

AFRINIC's return to legitimate governance depended not only on a technically valid tally but on a credible account of who had the opportunity to participate. Silence cannot supply that account by itself.

A freeze should stop discretion, not legitimate correction

Election administrators often say a roll is “frozen”. The word can conceal two incompatible meanings. A useful freeze fixes the evidence cutoff, rules and ordinary change route so that no entity can reshape the electorate after seeing the candidate field or early voting behaviour. A bad freeze refuses to correct a documented error merely because the institution created it before the deadline.

The proper model has three dates. The eligibility date determines the membership and standing facts that count. The registration deadline determines when a member must submit its voter designation. The certification date ends ordinary corrections and produces the version delivered to the ballot provider. Each date should be announced before members act.

After certification, only narrow mandatory changes should be allowed: a binding court order, death or incapacity of a designated voter where the rules provide replacement, confirmed loss of member status, or correction of an administrative error that would otherwise deny a right. The exception authority should be independent, use published criteria and notify all affected candidates or observers where appropriate.

Freezing also applies to rules. The institution should not redefine good standing, acceptable executive authority or identity requirements after reviewing applications. Clarification may be necessary, but it must be prospective where possible and accompanied by an equal cure period for everyone affected.

The frozen roll and platform import should be reconciled before voting. Counts, identifiers and activation status should match. Test accounts must be excluded and documented. The voting provider should attest that no administrator can add an eligible voter unilaterally after opening. Emergency changes should require dual control and appear in the final certification report.

This design allows correction without discretion becoming invisible. The objective is not a motionless record. It is a record in which every movement has authority, reason and equal treatment.

Independent verification must reach beneath the published list

An election observer who sees a list and watches the count cannot verify membership eligibility. The necessary evidence sits beneath the public surface: agreements, corporate records, billing status, court orders, contact history and designation documents. Independent assurance must therefore begin before the ballot.

The reviewer should reconcile the population in both directions. Starting from the legal and operational membership records, every eligible member should map to an eligibility decision. Starting from the voter register, every entry should map back to one member and one valid designation. This catches omissions as well as unauthorised additions.

The review should use complete populations for decisive fields rather than a small sample. One wrongful voter can matter in a close election, and one omitted member suffers a complete denial. Sampling may test lower-risk document quality, but existence, uniqueness, cutoff and designation mapping should be fully reconciled.

Independence requires more than an external company name. The reviewer should be appointed through a conflict-checked process, receive direct access to preserved evidence, control its test plan and report limitations to the certifying authority and members. The receiver and secretariat can answer factual questions but should not edit the conclusion.

The public assurance report can protect privacy. It should state populations, tests, exceptions, corrections, unresolved disputes, version identifiers and whether the voting platform matched the certified roll. It need not publish passports, personal addresses, account balances or privileged advice.

Where a dispute turns on law rather than data, the reviewer should not invent an answer. It can verify the facts and refer the interpretation to an independent legal decision-maker or court. Assurance establishes that the rule was applied consistently to verified facts; it does not give an accountant authority to define membership.

This separation is especially important in receivership. Court appointment provides lawful temporary authority, but independent verification gives members evidence that the temporary authority did not choose its own electorate.

The challenge process should produce reasons before voting

A member excluded from a crisis election needs a remedy fast enough to matter. An eventual acknowledgment after directors take office does not restore the lost vote. At the same time, allowing every allegation to halt the election would make delay a weapon.

The procedure should begin with notice of classification. Each member receives its eligibility state, designated-voter state, evidence deadline and reason code. A challenge identifies the disputed fact or rule and supplies documents. The administrator acknowledges it immediately and preserves the relevant record.

Straightforward corrections can be handled by a two-person team under published rules. Contested cases go to an independent reviewer. The reviewer should disclose conflicts, invite the member and administrator to provide evidence, and issue concise reasons. The decision states whether the roll changes, the effective version and any further review route.

A stay test should govern late serious complaints. Relevant factors include apparent evidence, number of voters affected, irreversibility, proximity to opening, privacy and continuity cost. A short preservation or provisional-access order may protect rights without suspending the entire election. If a disputed voter participates under seal, ballot secrecy and later treatment must be defined in advance.

Reasons need not expose private financial details. They can state that a payment was received after the eligibility cutoff, that corporate authority was not established by the deadline, or that a court order preserved membership. Publishing aggregate anonymised decisions builds precedent and reduces arbitrary exceptions.

The appeal route must sit outside the same chain that made the first decision. Returning a complaint to the staff member, receiver or committee whose act is challenged is reconsideration, not independent review. Court access remains available for serious rights, but an affordable internal-independent route is necessary because not every member can litigate in Mauritius on an election timetable.

Privacy is not a reason to make the electorate unauditable

The member and voter records contain sensitive information: personal identity documents, contact details, signatures, corporate authority evidence, account status and possibly biometric data. Broad publication could expose individuals to fraud or pressure. AFRINIC's final-register page expressly invoked data-protection principles and limited visible information.

Privacy and assurance can coexist if the records are designed by layer. The public roll can show the member organisation, jurisdiction or region where relevant, stable public identifier and whether a designated voter is confirmed, without publishing private contact details or identity documents. Each member receives a private view of its own record. The independent reviewer receives controlled access to the full evidence.

Candidates need equal communication access but not a copy of the contact database. AFRINIC can operate a neutral relay that sends the same authorised messages under documented rules. Delivery statistics can be reported without releasing addresses. This prevents member data from becoming a campaign asset available to insiders.

Biometric information deserves stricter limits. The election authority should state what the vendor collects, where it is processed, retention period, deletion proof, false-match procedure and alternative for a person who cannot complete facial verification. AFRINIC should receive only the minimum result needed to activate the voter unless a dispute requires more under lawful safeguards.

Change history can also avoid excessive retention. The institution may retain event metadata, evidence type, verification result and integrity proof after securely deleting an identity image when its purpose expires. The deletion itself becomes a logged event. Auditability does not require an indefinite warehouse of personal documents.

Secrecy must remain distinct from privacy. Ballot choice should not be linked to the member register in any accessible administrative view. Eligibility and participation may be auditable; vote content must remain secret. A system that proves who could vote should not prove how they voted.

Role separation is the practical constitution of the register

The register becomes trustworthy when no single actor can decide membership, designation, platform access and certification.

The secretariat should maintain operational member data and prepare evidence files. It has the historical knowledge and service responsibility required for accuracy. It should not alone decide contested election eligibility.

The receiver should establish the lawful restoration process, secure resources and seek directions where authority is uncertain. The receiver should not be the sole verifier or appellate body for the electorate that will determine the success of the receiver's mandate.

The Election Committee should validate standard designations, supervise deadlines and maintain the election record. Its members should not campaign, advise candidates or make undisclosed exceptions. Staff assistance should be written and logged.

The independent eligibility reviewer should reconcile the population, decide or refer contested cases and report exceptions. Appointment and fees should be transparent enough to assess independence.

The voting provider should authenticate approved voters, protect ballots and produce tally evidence. It should receive a certified roll, not authority to create one. Administrative access should require multiple authorised persons and leave immutable logs.

The certifier should confirm that the final roll, platform population and tally controls match. If election trustees perform this function, their responsibilities and conflicts should be public.

Finally, an appeal reviewer or court should address serious challenges outside the first decision chain. Each handoff should carry a versioned record. No actor needs unrestricted access to every layer; each needs enough evidence to perform a defined function.

This arrangement may appear elaborate for a private association. The complexity already existed in the rights, litigation and data. Role separation makes it visible and governable instead of allowing it to collect inside the secretariat or temporary custodian.

The register needed a clean handover to the elected board

Election integrity does not end when results are announced. The new board inherits responsibility for the membership systems that produced its authority. It needs a handover package capable of supporting future meetings, disputes and audits.

That package should contain the certified eligibility snapshot, rules and cutoff; the complete change event history; challenge decisions; assurance report; platform-reconciliation report; vendor deletion and retention evidence; unresolved status disputes; and a list of control improvements. Sensitive documents remain in protected custody with access rules.

The board should not quietly rewrite the history that elected it. Corrections to operational member data after the election should begin a new period and preserve the election snapshot. If the board later decides a member had been wrongly classified, it should state the prospective and any legally required retrospective consequences through a fair process.

The handover should also identify stale-contact risk, old agreements, unresolved corporate succession and accounts whose status depended on temporary rulings. These are not merely election issues. They affect service, contracts and the company's legal register. A reliable election can expose weaknesses that ordinary membership administration should then repair.

An independent post-election review should assess whether controls operated as designed, not relitigate every political complaint. It should publish denominator data, exceptions, incidents, costs and recommendations. The reviewers should be able to say whether all material changes were authorised and whether any evidence gap prevents that conclusion.

The receiver's exit should include transfer of custody and a declaration of any retained copy or access. Temporary election committees and vendors should lose administrative privileges. The elected board should verify revocation rather than assume it.

Authority returns to members only when the record, credentials and institutional memory return with it. A result announcement without controlled handover leaves the emergency architecture inside ordinary government.

The 2026 baseline rule revealed the register's long afterlife

AFRINIC's later election guidelines stated that the voter register compiled for the September 2025 board election would serve as the baseline for specified 2026 elections and member resolutions, while giving eligible members an opportunity to confirm, amend or replace designated voters. They also required a provisional and final register and described a freeze after the correction period.

That later choice shows why the 2025 record mattered beyond one ballot. A crisis register can become institutional infrastructure. Any undocumented inclusion, omission or designation can persist into later votes through a default-confirmation rule. Conversely, a well-audited baseline can reduce repeated paperwork and preserve continuity.

Reuse should never convert a temporary election rule into permanent membership law. The baseline contains designated voters for a particular purpose; the legal and operational member records remain authoritative for underlying status. Every later election must reapply current eligibility rules and mandatory status changes. Members must receive meaningful notice rather than being deemed to confirm a designation they did not know had survived.

The reuse rule also strengthens the case for an immutable 2025 change history. Future administrators need to know not just the final names but the basis and limits of each designation. If an entry resulted from a late confirmation, a court-preserved status or a resolved challenge, that history may matter when circumstances change.

The appropriate lesson is constructive. AFRINIC moved toward explicit provisional and final rolls, confirmation windows and frozen baselines. Those controls should be completed by independent reconciliation, version identifiers, exception reports and member-level receipts. Formal language is a start; verifiable execution is the protection.

What members should be able to ask and receive

A member should not need influence, technical expertise or Mauritian litigation to learn whether it can vote. Before a crisis election, every Resource Member should receive a standard statement answering six questions.

Is the organisation recorded as a member, and under what stable identifier and legal name? Is it classified as eligible on the stated date? If not, which fact or rule prevents eligibility? Who is recorded as the organisation's authorised designator and designated voter? What evidence or action remains outstanding? Where and by when can the organisation challenge the answer?

The response should include the register version and a verification code so the member can later prove what it was told without publishing private data. Any change generates a new notice showing old and new state. Silence by the institution should not deprive the member of review.

Members collectively should receive aggregate tables: population by class and region, eligible and ineligible counts, designation completion, platform activation, challenges, corrections, late exceptions, ballots cast and unresolved cases. The tables should reconcile from provisional to final to platform to tally.

Candidates should receive equal access to public and aggregate information. They should not obtain preferential member data from personal relationships with staff or temporary officeholders. Observers should be able to inspect controls and exception statistics without receiving identity files.

A future board should receive the full protected record and a duty to report remediation. Courts should receive a concise authority and exception map when disputes arise. Each audience gets enough evidence for its role, not unrestricted access.

This is what it means to treat members as principals rather than as an audience for announcements. Their right is not only to cast a ballot. It is to know that the institution recognised the right under a rule that could be contested before the vote became irreversible.

Election integrity and registry continuity were the same design problem

AFRINIC's technical services could continue while its board legitimacy failed. That does not make the member register secondary to operations. A prolonged absence of lawful supervision affects budgets, contracts, security exceptions, litigation authority and strategic decisions. The election was part of continuity because it was the mechanism for restoring accountable authority over those functions.

Continuity cannot excuse a weak electorate. An argument that the institution urgently needs directors does not justify unexplained exclusions, mutable deadlines or concentrated register control. A quickly elected board whose authority remains vulnerable to the same data disputes may deepen rather than end the crisis.

The opposite error is allowing every register complaint to suspend services or indefinitely prevent a vote. The solution is isolation. Technical operations continue under a narrow authority schedule. Eligibility disputes enter a fast independent process. The certified roll is frozen under visible exceptions. The ballot proceeds when the remaining uncertainty is bounded and reasons are available.

The register itself also needs operational continuity. Backups, access control, version history and alternative custodians should survive staff departure, cyber incident, account restraint and receiver handover. A corrupted membership table can disable both service and government. It deserves the same seriousness as other critical institutional records, while remaining separate from public number-resource registration data.

This is the deeper significance of the institutional vacuum. AFRINIC could not restore governance merely by scheduling a meeting. It had to prove the identity of the corporate electorate using records preserved through the period in which ordinary governance had failed. The integrity of those records was therefore part of regional registry resilience.

Control of the register was control of the exit

Receivership and court supervision were temporary answers to a company that could not govern itself through ordinary board machinery. Their legitimacy depended on an exit: a board chosen under rules members could trust. The member register defined who could authorise that exit.

This is why public lists and identity checks, though useful, were not enough. The decisive evidence lay in the chain connecting legal membership, resource relationship, standing, fees, corporate authority, designation, platform activation and final certification. Every link needed a custodian; every custodian needed limits; every change needed history.

The June 2025 annulment demonstrated the cost of uncertainty around authority documents without proving the misconduct of any person. The September redesign narrowed representation and strengthened identity checks. Its publication of provisional and final registers created a correction surface. The addition of four late-confirmed voters showed, in a small and concrete way, why the institution also needed an independently verifiable exception history.

The appropriate standard is neither blind trust in the secretariat nor suspicion of every administrative act. It is replayability. An independent reviewer should be able to begin with the total member population and reproduce the final roll. A member should be able to understand and challenge its own state. A voting provider should be unable to change eligibility. A receiver should be able to show that temporary authority did not select the principals who would end it.

When those conditions exist, the register becomes what it should be: evidence of member rights. Without them, it becomes an instrument of power hidden inside administration.

Sources and analytical limits

AFRINIC's 2020 constitution supplies the company's legal form, member classes, cumulative Resource Member formalities, member powers, termination provisions, voting methods and proxy rules. It establishes the formal design and does not prove that any disputed member was correctly included or excluded in a particular election.

The Supreme Court of Mauritius judgment in Benjamin Adzenyamebeye Eshun v African Network Information Centre (AfriNIC) Ltd, 2023 SCJ 63 is used for the board-quorum application, the court's concern for member rights and the institutional context. The Court of Civil Appeal judgment in African Network Information Centre (AfriNIC) Ltd v Cloud Innovation Ltd and another, 2024 SCJ 473 supports the later authority and receivership context. Neither judgment adjudicates the accuracy of the September 2025 voter register.

The receiver's 15 July 2025 notice is used only for the attributed account of suspected irregularities, particular concern about powers of attorney, an ongoing police investigation, absence of final conclusions and the decision to annul and rerun the election. It is not treated as proof of fraud, individual misconduct or outcome effect.

The replacement election's guidelines, designation process and voters-register page provide the eligibility criteria, direct-designation requirements, identity controls, dates, provisional and final publication, four late confirmations and AFRINIC's statement that no new applications were accepted after the deadline. They establish published procedure and announcements, not independent proof that each check was performed correctly.

The Mauritius Companies Act 2001 provides the legal background for company membership and records. AFRINIC's later 2026 election guidelines are used only to show the subsequent reuse of the September 2025 baseline and the later articulation of confirmation, provisional publication, finalisation and freezing; they do not retroactively prove the 2025 register.

No complete legal member register, operational membership ledger, billing history, designation evidence set, immutable change record, independent eligibility audit, platform access log, police file or sealed court material was available in the reviewed public record. The article does not identify any person or organisation as an ineligible voter, does not decide disputed membership, and does not claim that the four late confirmations were improper. Its proposed controls are governance standards for a crisis electorate, not findings that every control was legally required or technically absent in 2025.