PAN Lab — govern the network before failure spreads

The Lab speaks in pathways, pressures, levers, and gauges. This map connects that vocabulary to the formal failure-mode names used in the research grounding it — including a 2026 national survey of 1,179 U.S.-based social workers.

• Automation bias / overreliancecore

  The “Failures adopted by people or agents” pathway and the operator-deference-drift gauge. Staff turnover and autonomy expansion push it up; the deskilling-arrest lever caps it.

  Ledgered claim: In the same national survey, 40.8% of respondents reported ethical concerns about relying on AI for decision-making, and overreliance on automated decision-making was among the most frequently cited concerns overall.

• Deskilling / professional judgment erosioncore

  Overreliance in slow motion: the deference gauge drifting upward while correction capacity thins. The deskilling-arrest lever is its deliberate counter-schedule.

• Sycophancy / agreement-seeking outputcore

  The pushback-heavy-usage pressure runs the “Operator framing biases the model” pathway hot and makes the agreeable answers easier to adopt; the framing-hygiene lever dampens the loop at its origin.

  Ledgered claim: Research on AI sycophancy describes it as a fragmented construct — a family of distinct agreement-seeking behaviors that share a label but differ in form, mechanism, measurement, and required mitigation — and finds it intensifies under user pushback and across multi-turn interaction.

• Hallucination / incorrect-output propagationcore

  The Lab's core premise: every pathway in the diagram carries incorrect output away from its source, and every lever is a way of governing that propagation rather than assuming a perfect model.

• Unsafe data flow / privacy & confidentialitycore

  Modeled as pathways, gauged as exposure (Phase NP). Unsanctioned tool use opens a visible egress to the off-network sink; connector sprawl replicates an unverified cache between record systems; case-file-flagged pathways (MiDAS-class enforcement replication, records feeding vendor models) carry the same concern. While any such pathway runs, the Privacy gauge drains — and in Hard and Expert a full gauge is part of the win. Connection authorization cuts the pathways structurally; data minimization shrinks what there is to expose. The confidentiality harm at the far end stays outside the network: named, never computed.

  Ledgered claim: In the same national survey, concerns about data privacy and security were the most frequently reported challenge to using AI in practice (46.5% of respondents), and an increased focus on client privacy and confidentiality was the most requested improvement to AI tools for social work (50.4%).

• Bias propagation / institutional workflow biascore

  Biased framings and contaminated records travel the same workflow pathways failures do — an institutional propagation question, and the documented cases show the workflow (not the model alone) carrying the equity outcome in both directions. The Lab models no demographics: differential harm to served people is recorded outside the network, never computed from its dynamics.

  Ledgered claim: Evaluation evidence on the Allegheny Family Screening Tool found that screener overrides of the tool's recommendations reduced racial disparity in screen-in rates relative to the tool alone.

  Ledgered claim: An independent audit of Rotterdam's welfare-fraud risk model documented scores skewed against already-vulnerable groups, and the city suspended the system's use following the scrutiny.

• Transparency / provenance failurecore

  The record-contamination gauge reads how much unlabeled machine content feeds back into decisions; provenance labeling discounts it and the vendor gate attacks opacity at procurement.

• Weak human oversight / safeguard failurecore

  The scenario axis itself: one model, three oversight cultures, three very different outcomes. The correction and authority gauges track it; risk tiering, the circuit breaker, the conformity gate, and oversight cadence govern it.

  Ledgered claim: In the same national survey, 42.1% of respondents reported having no role in decision-making about AI adoption in their workplace; the report concludes most respondents have limited or no control over how AI technologies are selected or implemented within their organizations.

• Low AI literacy / verification readinesscore

  The AI-literacy-gap pressure: verification skill (not time) drops and deference rises as trust calibrates on the tool itself. The correction-capacity gauge reads the result. The grounding literature proposes AI literacy as a core professional competency.

  Ledgered claim: The same national survey describes a gap between AI exposure and AI preparedness: 26.6% of respondents cited lack of training or understanding of AI technology as a challenge, 53.4% said training on AI tools and effective use would help, and clear guidelines on the ethical use of AI were the most-endorsed need (66.8%).

  Ledgered claim: AI literacy — the knowledge and skills required to understand, use, and critically evaluate AI systems — has been proposed as a core competency for social work, relevant even to practitioners who never directly use AI tools.

• AI iatrogenics / governance backfireadvanced

  First-class here: the content-blind record purge backfires exactly as the published PAN runs found, and the efficiency readout will call a lever stack counterproductive to its face. The quieter iatrogenic — oversight whose gains are bought by rising deference — is why the deskilling-arrest lever exists.

  Ledgered claim: In published PAN runs, content-blind record removal raised the contaminated share of the record system by stripping benign dilution; only content-aware decontamination reliably reduced it. (PAN Governance Lever Audit ('content-blind levers backfire'))

• Monitoring failure / drift blindnessadvanced

  Two pressures carry it: the silent vendor update (drift arriving under controls tuned to old behavior) and monitoring going stale (dashboards nobody must act on — the authority gauge hollows while the regime worsens). Oversight cadence and vigilance escalation are the counters.

• Environmental burden (external context)external context

  Deliberately outside the network: nothing in this Lab computes environmental cost, and no gauge claims to. Practitioner concern about AI's environmental impact is documented in the survey evidence and belongs in deployment governance as external context.

  Ledgered claim: In the same national survey's open-ended comments, ethical concerns — prominently including the environmental impact of AI infrastructure — were the most common theme, and the report's first recommendation includes environmental impact among the topics profession-wide ethical guidance should address.