VI The Principal’s Condition
Rings of Protection
Residential security is a set of decisions about who enters and when, not a specification of equipment.
Residential security is sold as equipment and thought about as equipment, and the rings model is usually presented as a diagram of it: a perimeter layer of alarm and camera coverage, an access layer governing who enters and when, and an inner layer of emergency response, monitoring and safe-room infrastructure.
As a description of components that is accurate. As a way of thinking about where residences actually fail, it is misleading, because the three layers are not equally load-bearing and the market's attention is inversely proportional to where the exposure sits.
The failure point is the access layer
The perimeter is the layer that gets specified, priced and admired, and it is almost never the layer that fails. Perimeters fail to determined technical effort and to nothing else, and determined technical effort against a private residence is rare because it is unnecessary.
It is unnecessary because the access layer exists, and the access layer is a staffing and protocol question rather than a hardware one. A residence in normal operation admits people continuously: household staff on varying schedules, contractors for works that run for weeks, deliveries several times a day, guests of the principal, guests of the family, and the friends of children who arrive without notice. Every one of those is a lawful entry, and none of them is an anomaly any perimeter is designed to detect.
The consequence is that the question a residence must answer is not how to keep people out. It is who is currently entitled to come in, on what basis, verified how, and reviewed when — and that is an administrative question whose answer degrades quietly.
Why standing arrangements erode
Erosion is the characteristic failure and it is worth describing, because nobody decides on it.
An arrangement is established carefully at the outset. A contractor is vetted for a project; the project ends and the access remains. A staff member's role changes and their access does not narrow with it. A code is shared once for a legitimate reason and is never changed. A supplier is replaced by another under the same account, and the vetting attaches to the account rather than the people. A procedure is followed rigorously for eighteen months and then relaxed on a night when following it was inconvenient, and the relaxation becomes the practice.
Each step is individually reasonable and taken by someone acting sensibly. The aggregate, after some years, is a residence whose actual access position bears little relation to its documented one — and the gap is invisible until someone asks the specific question of who, today, can physically enter, and finds that no single person knows.
That is why an objective assessment matters more than an installation. What such an assessment covers is access control, surveillance coverage, staff protocols, emergency procedures and exposure to covert penetration, and its most useful output is usually a list of people with access that nobody had realised was still live.
Why the market points at the perimeter
It is worth asking why attention concentrates on the layer that fails least, because the answer is not ignorance.
The perimeter is specifiable. It can be drawn, quoted, itemised and installed on a date, and when it is finished there is something to look at. It converts an open-ended anxiety into a completed purchase, which is a real service to a principal who wants the matter dealt with. It is also where the margin is, since equipment carries a supply chain and protocols do not.
The access layer has none of those properties. Its remedy is a set of rules about people, maintained indefinitely, generating friction for the household daily and producing nothing visible. Nobody finishes it. It cannot be photographed, and the evidence that it is working is the continued absence of an event that would probably not have happened anyway.
So the imbalance is not a failure of understanding by either side. It is the predictable result of one layer being purchasable and the other being administrable, and correcting it requires a principal to spend on the thing that will never feel finished.
The family problem
There is a further constraint that determines whether any of this functions, and it is the same finding that governs protective arrangements generally: a system the family will not comply with is not a system.
Household security depends on the daily behaviour of people who did not choose it, do not experience the threat as real, and reasonably resent the friction. Adolescents and their friends are the standing example, but the pattern is general — a procedure that is complied with ninety per cent of the time has not delivered ninety per cent of its value, because the omissions cluster precisely where the procedure was inconvenient, which correlates with unusual circumstances, which is when it mattered.
The design implication runs against the instinct of the field. A lighter arrangement that is actually followed outperforms a comprehensive one that is followed selectively, and the comparison should be made honestly at the design stage rather than discovered later. That means the family's actual tolerance is a design input of the same standing as any assessment of exposure, and a provider who does not ask about it is specifying for a household that does not exist.
None of the above specifies any measure, and it deliberately contains no detail about how any arrangement is defeated or configured; that belongs in an engagement rather than on a page. The one transferable point is the reordering. The layer that is easiest to buy is not the layer that fails, the layer that fails is administrative, and administrative positions decay on a timescale of years without anyone noticing — which makes periodic re-examination of who holds access the single highest-value recurring act in residential security, and the one least likely to appear on a proposal.