What it changes
Who can pull it
What it looks like institutionally
The record reconciler is the placeable component behind Reconcile copied records: tethered onto a specific replication pathway, it holds copies flowing from a record store to a downstream enforcement system until they have been reconciled against their source. It exists to close the exact gap the documented enforcement failures left open — systems that actioned replicated flags automatically, with garnishment and penalties applied before any human review step.
Placement is the governance decision: the reconciler acts only on the pathway it is wired between, so it is aimed at the replication that actually drives consequential action, not at the record store in general.
It must be content-aware. A content-blind gate on the same pathway — one that removes or blocks copies without reading them — raises the contaminated share rather than cutting it, the documented PAN backfire. Reconcile against source; do not purge on volume.
Addresses: Replicate-without-recheck · Automatic action on unreconciled copies.