andon/docs/adr/0002-attribution-is-transparent-not-blameless.md

Attribution is transparent, not blameless

The Toyota/Andon norm is that pulling the cord is blameless — reporters are never named, so no one hesitates to signal a problem. We deliberately deviated: the Reporter's @theodo.com identity (from SSO) is stored and shown on the dashboard. The bet is that Theodo's high-trust culture makes naming a source of accountability and follow-up rather than fear, and that visible authorship raises the quality of verbatims.

Consequences

• This is a cultural risk: if reporting volume is low or verbatims become guarded, revisit and consider hiding the Reporter (the data is already captured, so only the display would change — relatively reversible).
• Combined with the dashboard being open to all @theodo.com (visual management), every defect is attributable company-wide.