Smoke & Retained
There's a button in the app that fires the whole chart out
CloudWatch keeps it forever,
no one checks the flag,
no doubt They called the backup file
"anonymised" — it wasn't,
love
It's still sat there in the export,
wearing someone else's glove
So we asked the quiet question,
half a theory, half a prayer
Does it matter whose machine it is,
if the data's still out there?
Same cloud, same rain,
different roof
Same server — don't mean the same proof
Thirty days they keep the wire
Some models watch, some don't require
Not a paradox, love
— just paperwork
Turns out you don't need the GPU,
the small ones run on CPU fine
Trained on Boston hospital records — blind to every NHS line A
ward name isn't a postcode,
a postcode isn't a name
The dream of hosting it ourselves died quiet,
died of shame
Found an old script,
spaCy and regex,
thought it was nothing at all
Turns out it's the same trick the fancy tool does,
just held up by the wall "BMI 27" comes out "NAME 27"
— the whitelist's got no border
Swallowed a hospital whole as an address,
dropped every surname
in the order
Ten names deep it just...
stops.
StopIteration.
No warning at the door
"AWS already covers it," he said,
"I read it,
it's filed"
Went and read the actual document — patient data's not on trial
Wrong DPIA, wrong system,
a chatbot in another room
Fresh assessment, every time — that's not a loophole,
it's a tomb
Same cloud,
same rain,
different roof
Not a paradox — just paperwork
Sign the form, not the myth
Every vendor's
in on it
Eight times the price,
one clean report, a badge that says HIPAA-approved
But nobody here answers to Boston law,
that badge don't move
The swell rises,
the strings come up,
we've cracked it, we've found the key
—
...except the oldest law was never digital at all Confidentiality,
common law, been standing since before the wall No contract signs it
away. Consent, or a number:
two-five-one.
And "EU S2"?
Weeks of guessing, Spain,
a coastline, a whole theory built — It was London.
It was London the entire time.