Fable
The ledger could only sleep in the North Warehouse
The border-town bank kept contracts for traveling merchants. The imperial court ruled that certain contracts had to remain in the local stone vault and could not be carried by caravans to other provinces. The proprietor initially thought that as long as they were locked up well, it made no difference where they were kept.
A provincial administrator, for convenience, sent the duplicate copies to the capital's main archive. The ledgers became easier to check, but he was stopped by the circuit inspector: the contracts were not lost, but they had left the territory where they were permitted to be kept.
Only then did the silver house redraw the vault map. Which contracts could remain only in this province, which could be backed up in a neighboring province, and which could be taken out through the pass but with names masked were all marked in color. Copying, consulting, transporting, and destroying also left seals according to territorial boundaries.
Later, when the caravan did business across provinces, the clerks first asked where the contract lived, and only then asked who could see it. Convenience no longer outweighed jurisdiction.
The shopkeeper first argued that the capital's stone vault was thicker and safer, and the contract had not leaked. The inspector shook his head: this rule governs not how strong the lock is, but where the contract actually sleeps. If the court requires it to remain in this province, then even a safer vault in another province crosses the line.
The bank later redesigned its vaults. Originals and complete copies went only into the stone vault of the home province; if an out-of-province steward wanted to check the accounts, he could only view approved summaries; temporary transcripts also had to be destroyed daily. Only then did the manager distinguish clearly that confidentiality, theft prevention and storage location are three separate matters. Just because something is not lost does not mean it is living where it should.
Later, when merchants asked why it couldn't be placed in the capital, the clerk would simply explain with a map: which repository belongs to this province, which transmission route would cross the boundary, which replica can only stay temporarily. Once the rules are grounded in geography, disputes decrease. Later, when merchants asked why it couldn't be placed in the capital, the clerk would simply explain with a map: which repository belongs to this province, which transmission route would cross the boundary, which replica can only stay temporarily. Once the rules are grounded in geography, disputes decrease. Later, when merchants asked why it couldn't be placed in the capital, the clerk would simply explain with a map: which repository belongs to this province, which transmission route would cross the boundary, which replica can only stay temporarily. Once the rules are grounded in geography, disputes decrease.
Some information risks are hidden in the location itself. If placed in the wrong place, even if it is not stolen, it may already have broken the rules and lost customer trust.