PAN Lab example
UPS delivery route optimization
A hundred million miles saved and the discretion it cost
A route-optimization system computes and dictates each driver's delivery route and monitors adherence through telematics. Modeled on a documented OR success - ~100M miles and ~10M gallons of fuel saved a year - that is, in the same system, workplace surveillance: the saving is captured only by directing the driver and measuring compliance. The efficiency is real and measured in miles and fuel; the cost is the driver's discretion and the monitoring that enforces the route. So watch what the efficiency dashboard cannot see: whether 'optimal' is livable, and whether the surveillance is governed.
Open this example in PAN Lab v0.1 to apply pressures and levers and watch what the system does.
What this models
This example runs on the Route-optimization-class that is also worker surveillance network: 6 components and 11 pathways between them. Every context in the Lab is a stylized model, never a reconstruction of any actual deployment, and each assumption behind it carries a provenance label.
Evidence base: 3 assumed · 2 published baseline. In the Lab, the shaded evidence band behind each headline readout draws its width from the least-established class below.
- assumed
Two documented components come onto the board and they explain opposite halves of this case. The telematics stream is its own inbound source at full strength: a live feed off the vehicle that is at once what the routing is computed from and what adherence is judged by - which is why nobody in this deployment has to decide to surveil for surveillance to happen, and why the optimization and the watching cannot be separated by choosing differently about either. The routine-consistency constraints are the artifact on the other side: the record says the raw optimum could not be implemented by drivers and the programme nearly ended in 2007 over exactly that, and what saved it was a layer of rules the computed route has to satisfy before it is issued. A heavy workload against limited capacity - a national fleet, and drivers who did end up with a route they could run, which is the documented reason this worked at all.
- baseline
This models the optimization-and-surveillance pattern documented in the case file - not a reconstruction of the actual system. A fleet-wide route optimization is a genuine, peer-reviewed operations-research success (reported to save ~100M miles and ~10M gallons of fuel a year) and, in the same system, a workplace-surveillance tool, because the saving is captured only by dictating the route and monitoring adherence via telematics. The efficiency figures are the peer-reviewed operations-research result, entered as such.
- assumed
The optimization and the surveillance are modeled as one system (the model's self-loop): the modeled saving is captured only by enforcing the modeled route, and the route is enforced only by monitoring the driver, so the same output that saves the miles removes the discretion and requires the monitoring. The driver is the operator the system directs - the person the optimization's cost lands on - and the telematics channel is drawn privacy-sensitive on both directions because the same worker-monitoring data enforces the route and feeds the next optimization.
- baseline
The two governable surfaces are the latent checks. The feasibility/humaneness check (empty independent model check): whether 'optimal' is livable for a real driver, or only minimal on the metric - a route the model prefers but a person cannot reasonably run should be caught, not imposed. The surveillance-proportionality review (empty oversight check): whether the monitoring that enforces the route is governed as a cost or treated as a free byproduct of routing. The efficiency metric measures neither - miles and fuel are on the dashboard, autonomy and surveillance are not - so the cost the optimization exports onto the worker is invisible to the number that reports its success.
- assumed
No worker outcome is modeled here. This Lab reads institutional propagation only, and the driver is drawn as the operator the system directs. The miles-and-fuel benefit, the adherence surveillance, and the autonomy cost live in the case file - the efficiency a peer-reviewed operations-research result, the surveillance cost a recorded research finding - and are never computed from anything in this diagram.
What this example does not show
- No worker outcome is modeled. The Lab reads institutional propagation only; the driver is drawn as the operator the system directs, and the miles-and-fuel benefit, the adherence surveillance, and the autonomy cost live in the case file, never computed on this diagram.
- The ~100M-miles / ~10M-gallons figures are the peer-reviewed operations-research result entered as such; the surveillance and autonomy cost is a recorded research finding, and the feasibility check and the surveillance-proportionality review are drawn as two latent checks, not a computed harm.
Sources and evidence
What this example rests on, claim by claim. Every entry resolves to the same ledger the Evidence Registry publishes.
A parcel carrier's route-optimization system is a documented operations-research success: it re-optimizes delivery routes across the fleet and was reported to save on the order of 100 million miles and about 10 million gallons of fuel a year, a genuine and peer-reviewed efficiency gain. The same system that computes the efficient route also dictates it to the driver and monitors adherence through vehicle telematics, so the efficiency is enforced through workplace surveillance — the optimization and the monitoring are one system, and the driver's discretion over how to run the route is what it replaces. The benefit is real and measured in miles and fuel; the cost is the driver autonomy the enforcement removes and the surveillance the enforcement requires.
empirical- Academic Holland, C., Levis, J., Nuggehalli, R., Santilli, B., & Winters, J. (2017). UPS Optimizes Delivery Routes. Interfaces, 47(1), 8-23. https://doi.org/10.1287/inte.2016.0875
- Academic Levy, K. (2023). Data Driven: Truckers, Technology, and the New Workplace Surveillance. Princeton University Press. https://press.princeton.edu/books/hardcover/9780691175300/data-driven
The lesson the case carries is that an optimization which manages the worker executing it couples the efficiency gain to a cost the efficiency metric does not see: the worker's autonomy, and the surveillance required to enforce the plan. The system measures miles and fuel, not whether the pace it sets is feasible for a person or whether the monitoring it requires is proportionate — so the governable surfaces are whether the optimization internalizes the human executing it, meaning a route that is feasible and humane rather than merely optimal on paper, and whether the surveillance that enforces it is governed rather than treated as a free byproduct of routing. An optimization is a success on its own terms and can still externalize a cost onto the worker that never appears in the miles-and-fuel number it reports.
empirical- Academic Levy, K. (2023). Data Driven: Truckers, Technology, and the New Workplace Surveillance. Princeton University Press. https://press.princeton.edu/books/hardcover/9780691175300/data-driven
- Academic Holland, C., Levis, J., Nuggehalli, R., Santilli, B., & Winters, J. (2017). UPS Optimizes Delivery Routes. Interfaces, 47(1), 8-23. https://doi.org/10.1287/inte.2016.0875
Where this connects
Institutional pressures in this domain
- Austerity & recovery incentives — Cost-cutting and overpayment-recovery targets tilt the system toward denial and enforcement errors.
- Reviewer bottleneck — One fixed-capacity checking stage sits between AI output and consequence; everything queues behind it.
- Data & policy drift — The world, the intake process, and the rules change under a system trained on how things used to be — two mechanisms with different remedies: the statistical properties of what the system processes move (concept drift), or the mixture of inputs arriving in deployment differs from the mixture it was trained on (covariate shift).
- Vendor opacity — The deploying institution cannot inspect the model, data, or update pipeline it is accountable for.
- Compliance over substance — Paper controls (sign-offs, checklists) satisfy audits while the behavior they describe erodes.
All of them in context on the Logistics dispatch & scheduling AI domain page.
Levers available here and the patterns behind them
- Store less data — Data minimization
- Gate record entries — Human-in-the-loop write gating
- Keep skills sharp — Deskilling-arrest mandate
- Peer sharing rules — Peer-edge governance
- Review on schedule — Oversight cadence & retrospectives
- Assign a challenger — Structured dissent
- Check copied records — Reconcile copied records
- Escalate checks — State-feedback vigilance
- Upgrade model — Improve the model