Pancakes Ostrom Governance Model
Document Name: Pancakes Ostrom Governance Model
Document Type: Ecosystem Governance Guidance
Status: Foundational
Purpose: Define how Pancakes evaluates, improves, and sustains
commons-governance capability using Elinor Ostrom’s design principles.
Related Documents:
- Pancakes Charter of Rights and Freedoms
- Pancakes Common Good Model
- Pancakes Stewardship Model
- Pancakes Standards Model
- Pancakes Ethics Framework
- Pancakes Safety Cases
- Pitchfork Privacy and Security
- Pitchfork Data Sovereignty
- Pancakes Node Infrastructure
1. Purpose
1.1 Why This Document Exists
Pancakes increasingly includes:
- household nodes,
- community nodes,
- cooperative nodes,
- shared resource pools,
- service exchange,
- cooperative information,
- data stewardship,
- permissioned settlement,
- and shared symbolic infrastructure.
These systems cannot be governed well by product management alone.
They also cannot be governed well by treating every shared resource as either:
- a private asset controlled by a platform operator,
- or a public function controlled by a central authority.
Pancakes requires a third governance mode:
locally legitimate
participant-governed
commons-oriented
evidence-based
polycentric
Elinor Ostrom’s work on durable commons governance provides the primary
external framework for this mode.
1.2 Relationship To ISO 9004
This document is patterned after ISO 9004:2009 as a style of guidance:
- guidance rather than certification,
- sustained success rather than one-time conformance,
- self-assessment rather than pass/fail audit alone,
- maturity levels used to identify improvement priorities,
- interested-party needs balanced over time,
- strategy and policy deployment,
- resource and process management,
- monitoring, measurement, analysis, and review,
- improvement, innovation, and learning.
This document is not an ISO standard and does not reproduce ISO 9004.
It adapts ISO 9004’s sustained-success structure to commons governance. Where
ISO 9004 asks whether an organization can sustain quality and performance over
time, this model asks whether a Pancakes commons can sustain legitimate,
humane, accountable self-governance over time.
1.3 Relationship To Ostrom
Ostrom provides the design-principle lens.
Pancakes adds:
- digital-commons interpretation,
- node-governance interpretation,
- evidence expectations,
- maturity levels,
- review questions,
- and improvement planning.
The maturity model in this document is a Pancakes assessment tool. It is not
part of Ostrom’s original framework.
2. Scope
This model applies to Pancakes and Pitchfork systems that include shared
resources, shared authority, or cooperative participation.
Examples include:
- household nodes with multiple participants,
- guild or community nodes,
- cooperative nodes,
- service exchanges,
- research commons,
- data cooperatives,
- cooperative treasuries,
- shared compute pools,
- shared knowledge systems,
- ambient projection communities,
- and future federated node networks.
This model does not automatically apply to purely private local tools with no
shared resource, no shared governance, and no collective risk.
3. Core Principle
Pancakes commons governance shall be evaluated by asking:
Can the people affected by a shared resource understand it, govern it,
monitor it, repair harm, resolve conflict, adapt rules, and leave without
surrendering authority to an extractive platform or unaccountable center?
The goal is not governance theater.
The goal is durable, humane, accountable self-governance.
4. Managing For Sustained Commons Success
4.1 General
A Pancakes commons should be managed as a living governance system.
Sustained commons success depends on:
- clear mission, vision, and values,
- awareness of the commons environment,
- understanding interested parties,
- balancing conflicting needs,
- participant involvement,
- stewardship of resources,
- process discipline,
- evidence-based decision making,
- continual improvement,
- innovation where conditions change,
- and learning from experience.
The governance system should be strong enough to preserve trust and light
enough that people can actually use it.
4.2 Sustained Commons Success
Sustained commons success means that a commons can achieve and maintain its
purpose over the long term while protecting participants, preserving shared
resources, adapting to change, and avoiding platform enclosure.
A commons should therefore:
- identify its purpose and long-term objectives,
- identify interested parties and affected parties,
- balance competing needs transparently,
- monitor internal and external conditions,
- manage short-term and long-term risks,
- anticipate future resource and competence needs,
- keep participants informed,
- provide negotiation and mediation paths,
- periodically assess whether rules still fit local conditions,
- and maintain improvement, innovation, and learning processes.
4.3 Commons Environment
The commons environment includes internal and external conditions that can
affect governance legitimacy, resource health, participant protection, or
long-term viability.
Examples include:
- participant capacity,
- household and community conditions,
- technology changes,
- legal and regulatory changes,
- economic pressure,
- funding changes,
- hosting arrangements,
- dependency risk,
- cultural expectations,
- environmental constraints,
- privacy and security threats,
- and social conflict.
The commons should monitor its environment often enough to detect material
changes before they become governance failures.
4.4 Interested Parties And Affected Parties
A commons should identify parties that contribute to, depend on, govern, host,
fund, regulate, or are affected by the commons.
Relevant parties may include:
| Party |
Typical needs and expectations |
| Participants |
dignity, safety, fair rules, voice, exit rights |
| Stewards |
authority proportional to responsibility |
| Node operators |
clear policies, manageable workload, support |
| Maintainers |
stable interfaces, accountable change process |
| Households |
privacy, continuity, understandable governance |
| Communities |
legitimacy, reciprocity, conflict resolution |
| Partners |
mutual benefit, clear agreements, reliability |
| Vulnerable people |
heightened protection, advocacy, non-coercion |
| Regulators or legal authorities |
compliance where applicable |
| Future participants |
portability, institutional memory, sustainability |
Needs may conflict. The governance process should make those conflicts visible
and provide a legitimate way to resolve or balance them.
4.5 Strategy And Policy
Every applicable commons should define:
- mission,
- desired future state,
- values,
- governance objectives,
- policy commitments,
- risk posture,
- and review cadence.
Strategy and policy should be deployed into concrete responsibilities,
processes, records, node policies, Pitchfork events, and review activities.
Participants should receive information in a form they can understand. A
technical policy hidden in a repository is not sufficient governance
communication for a mixed-ability commons.
4.6 Resource Management
A commons should identify, allocate, protect, monitor, and improve the
resources required for sustained governance.
Resources may include:
- financial resources,
- people and competence,
- steward time,
- participant attention,
- partner contributions,
- infrastructure,
- work environment,
- knowledge,
- information,
- technology,
- natural resources,
- compute,
- and institutional memory.
Resource scarcity should be treated as a governance risk. A commons that
depends on exhausted stewards, unpaid invisible work, fragile hosting, or
unclear funding is not mature.
4.7 Process Management
Commons governance should be managed through defined, interacting processes.
Required process areas include:
- commons intake,
- participant entry and exit,
- rule change,
- monitoring,
- dispute resolution,
- enforcement and repair,
- safety and ethics escalation,
- resource review,
- management review,
- improvement,
- innovation,
- and learning.
Each process should have:
- purpose,
- inputs,
- outputs,
- responsible role,
- authority boundary,
- records,
- measures,
- interfaces with other processes,
- and improvement method.
Process responsibility may belong to a person, team, council, node role, or
QMS-controlled function, depending on risk and scale.
4.8 Monitoring, Measurement, Analysis, And Review
A commons should use evidence to understand whether governance is working.
Monitoring should cover:
- resource state,
- participant needs,
- rule observance,
- dispute patterns,
- enforcement fairness,
- stewardship load,
- privacy and security signals,
- external changes,
- legal or regulatory triggers,
- partner performance,
- and improvement effectiveness.
Measurement should use indicators that are useful, reliable, and proportionate.
Examples:
- time to resolve disputes,
- unresolved dispute count,
- appeal rate,
- repeated violation rate,
- steward workload,
- participant exit friction,
- rule-change participation,
- monitoring misuse incidents,
- privacy incidents,
- resource depletion or scarcity signals,
- participant trust feedback,
- and completion of improvement actions.
Review should occur at planned intervals and after significant events. Review
outputs should feed improvement planning and, where applicable, management
review or QMS escalation.
4.9 Improvement, Innovation, And Learning
A commons should learn from:
- disputes,
- near misses,
- sanctions,
- participant exits,
- monitoring findings,
- audits,
- safety or ethics findings,
- partner feedback,
- technology changes,
- and successful adaptations.
Improvement stabilizes and strengthens existing governance.
Innovation changes governance when existing processes no longer fit the
commons environment.
Learning preserves experience so the commons does not repeatedly rediscover
the same failure modes.
4.10 Governance Management Principles
Pancakes adapts quality-management principles into commons-governance
principles:
| Management principle |
Pancakes commons interpretation |
| Participant and affected-party focus |
Understand current and future needs of people affected by the commons |
| Stewardship leadership |
Establish shared purpose while keeping authority accountable |
| Involvement of people |
Enable participants to contribute, object, learn, and improve governance |
| Process approach |
Manage governance activities as defined processes with inputs and outputs |
| System approach |
Understand interactions among rules, nodes, resources, people, and records |
| Continual improvement |
Treat governance capability as something that must improve over time |
| Evidence-based decisions |
Use reliable information while respecting privacy and context |
| Mutually beneficial relationships |
Build durable relationships with partners without enclosing the commons |
These principles do not replace Ostrom’s design principles. They describe the
management habits needed to keep Ostrom-aligned governance effective over
time.
5. Commons Governance Concepts
5.1 Commons
A commons is a resource system governed by a community of participants through
shared rules, responsibilities, and institutions.
Within Pancakes, a commons may involve:
- information,
- attention,
- compute,
- money,
- shared services,
- community knowledge,
- symbolic state,
- physical resources,
- household capacity,
- cooperative infrastructure,
- or governance authority.
5.2 Commons Resource
A commons resource is the thing being preserved, shared, provisioned, or
protected.
Digital commons often differ from natural-resource commons. Use may not
deplete the resource directly, but governance may still need to manage:
- maintenance burden,
- moderation burden,
- compute cost,
- privacy risk,
- data quality,
- trust,
- attention,
- contribution imbalance,
- enclosure risk,
- and institutional legitimacy.
5.3 Participants
Participants are people or institutions with defined standing in the commons.
Participant roles may include:
- member,
- steward,
- contributor,
- node operator,
- monitor,
- maintainer,
- custodian,
- affected party,
- reviewer,
- or external authority.
Roles must define rights, obligations, limits, and accountability.
5.4 Nodes
In Pancakes, nodes are not merely servers.
Nodes may be:
- deployment boundaries,
- identity boundaries,
- permission boundaries,
- data boundaries,
- governance boundaries,
- stewardship boundaries,
- and community boundaries.
An Ostrom-aligned node must make those boundaries explicit.
5.5 Pitchfork Settlement
Pitchfork may support commons governance by recording and applying:
- events,
- permissions,
- resource state,
- caps,
- contracts,
- covenants,
- settlement rules,
- audit evidence,
- and derived projections.
Pitchfork must not become an omniscient surveillance layer. Commons
accountability and participant privacy must be designed together.
6. Ostrom Design Principles
The Pancakes Ostrom Governance Model uses eight design principles as the core
evaluation lens.
6.1 Clearly Defined Boundaries
A commons must define:
- who is inside the commons,
- who is outside the commons,
- what resource is governed,
- what resource units or capacities can be used,
- what information is shared,
- what information remains private,
- what rights participants hold,
- and what obligations participants accept.
Pancakes interpretation:
- every commons needs a Commons Profile,
- every node needs policy boundaries,
- every participant role needs rights and obligations,
- every shared resource needs an explicit scope.
6.2 Rules Fit Local Conditions
Rules must fit the commons’ actual context.
Relevant local conditions may include:
- household structure,
- community norms,
- technical capacity,
- vulnerability,
- legal environment,
- economic burden,
- maintenance capacity,
- cultural expectations,
- and resource characteristics.
Pancakes interpretation:
- household rules should not be copied blindly into cooperative nodes,
- cooperative rules should not be imposed on private local tools,
- resource caps and contribution expectations must be proportional,
- incentives must be reviewed for coercion and extraction.
6.3 Collective-Choice Arrangements
People affected by operational rules should be able to participate in changing
those rules.
Participation does not require every decision to use the same method.
Rule changes may use:
- consent,
- voting,
- delegation,
- steward review,
- maintainer review,
- ethics review,
- safety review,
- or emergency authority.
Pancakes interpretation:
- the rule-change path must be visible,
- non-technical participants need a real path to participate,
- emergency changes must be reviewable,
- maintainers must not silently become rulers.
6.4 Monitoring Accountable To Participants
The commons must monitor resource conditions and rule observance.
Monitors must be participants or accountable to participants.
Pancakes interpretation:
- monitoring must be privacy-preserving,
- monitoring authority must be limited,
- monitor roles must be reviewable,
- audit evidence must be sufficient for accountability,
- sensitive records must not be exposed merely because monitoring is useful.
6.5 Graduated Sanctions
The commons must be able to respond to rule violations proportionately.
A healthy system distinguishes:
- mistake,
- overload,
- misunderstanding,
- first violation,
- repeated free-riding,
- negligence,
- coercion,
- abuse,
- fraud,
- and malicious exploitation.
Pancakes interpretation:
- enforcement must include repair paths,
- sanctions must be graduated,
- sanctions must be appealable,
- serious harm must be escalated appropriately,
- enforcement must not become domination.
6.6 Conflict-Resolution Mechanisms
Participants need access to low-cost, timely, local conflict resolution.
Pancakes interpretation:
- disputes should have a visible intake path,
- participants should know who reviews disputes,
- small nodes need lightweight processes,
- sensitive matters need confidentiality,
- safety, ethics, legal, and QMS issues need escalation routes.
6.7 Rights To Organize
Participants must be able to create and maintain their own institutions.
Pancakes interpretation:
- household and community nodes need real authority,
- hosted services must not erase node sovereignty,
- legal forms and contracts must not enclose the commons,
- participant export and exit rights must be preserved,
- external obligations must be recognized without surrendering unnecessary
authority.
6.8 Nested Enterprises
Larger commons require governance across multiple layers.
Pancakes interpretation:
person
→ household
→ node
→ cooperative or guild
→ protocol
→ Pancakes product governance
→ Pitchfork contract governance
→ FLEY organization governance
→ QMS / legal / regulatory review
Decisions should be routed to the smallest competent accountable layer and
escalated when scope, risk, conflict, or law requires it.
7. Pancakes Ostrom Maturity Model
7.1 Purpose
The maturity model supports self-assessment and continual improvement.
It is not a certification scheme.
It is not part of Ostrom’s original framework.
It is a Pancakes tool for determining whether a commons-governance principle
is informal, managed, deployed, systematically reviewed, or improving through
learning.
7.2 Maturity Levels
Not Assessed Or Not Applicable
Not assessed and not applicable are outside the maturity scale.
They may be used when:
- the principle has not yet been reviewed,
- the project has no commons-like characteristics,
- or a documented rationale explains why the principle does not apply.
Level 1: Initial
The principle is handled informally or reactively.
Typical signs:
- values may be implicit,
- no stable process exists,
- responsibility is unclear,
- evidence is weak,
- decisions handled ad hoc.
Risk:
- unmanaged commons failure,
- platform enclosure,
- conflict escalation,
- hidden authority.
Level 2: Managed
The principle is recognized and managed through basic documented practices.
Typical signs:
- roles are named,
- minimum records exist,
- basic responsibilities are assigned,
- review is periodic or event-triggered,
- corrective action is possible but not systematic.
Evidence examples:
- roadmap note,
- concept document,
- governance concern,
- draft process,
- initial Commons Profile.
Level 3: Defined And Deployed
The principle is defined in reusable artifacts and deployed for a specific
commons.
Typical signs:
- terms are defined,
- roles are described,
- process expectations exist,
- required records are named,
- applicability criteria exist,
- project-specific responsibilities are assigned,
- participants can understand the process.
Evidence examples:
- Commons Profile template,
- governance process,
- monitoring standard,
- dispute process,
- standards applicability section.
Level 4: Systematic And Reviewed
The principle operates systematically and is reviewed using evidence.
Typical signs:
- the commons has completed the relevant profile,
- roles are assigned,
- node policies are specified,
- Pitchfork events or records are defined,
- workflows can run,
- records are created,
- review criteria are testable,
- improvement actions are tracked.
Evidence examples:
- project Commons Profile,
- governance assessment,
- node policy design,
- settlement design,
- safety or ethics case,
- rule-change records,
- monitoring records,
- dispute records.
Level 5: Improving And Learning
The principle has evidence from real use and is improved through learning.
Typical signs:
- real participants have used the process,
- trends are monitored,
- issues were detected and handled,
- participants could understand the process,
- governance improved after review,
- learning is shared where appropriate,
- residual risks are known.
Evidence examples:
- effectiveness review,
- participant feedback,
- resolved dispute,
- repaired harm,
- rule-change history,
- monitoring review,
- audit trail.
8. Evaluation Method
An Ostrom assessment should review:
- Commons Profile,
- Standards Applicability Profile,
- node policies,
- participant roles,
- resource boundaries,
- permission model,
- Pitchfork settlement model,
- governance records,
- monitoring evidence,
- dispute records,
- enforcement and repair records,
- exit and portability evidence,
- safety and ethics cases where applicable.
8.2 Scoring
Each Ostrom principle receives a maturity score from 1 to 5.
Scores must be evidence-based.
A project may not claim a score above the available evidence.
For example:
- a principle handled ad hoc is Level 1,
- a principle recognized with basic records is Level 2,
- a principle defined and deployed for a commons is Level 3,
- a principle operating systematically with review evidence is Level 4,
- a principle improved through real-use learning may reach Level 5.
The current maturity level is the highest level achieved with no preceding
gaps. A commons cannot claim Level 4 if Level 3 evidence is missing.
8.3 Overall Maturity
Overall maturity should be reported as:
- individual principle scores,
- lowest principle score,
- average score,
- required improvement actions,
- residual governance risks.
The lowest principle score matters because commons failure often occurs at the
weakest governance function.
An average score must never hide a missing conflict-resolution path, absent
sanctions, unclear boundaries, or unaccountable monitoring.
8.4 Applicability
Not every Pancakes project requires the same Ostrom target.
Minimum expectations:
| Project type |
Target maturity |
| Private single-user local tool |
Ostrom review usually not required |
| Household node with shared responsibilities |
Level 2 or 3 |
| Community or guild node |
Level 3 minimum before launch |
| Cooperative service exchange |
Level 3 before launch, Level 4 during operation |
| Data cooperative or research commons |
Level 4 before broad use |
| Cooperative treasury or financial pool |
Level 4 plus financial controls |
| Federated node network |
Level 4 before federation, Level 5 evidence for expansion |
Targets may be raised by risk, vulnerability, economic participation, legal
obligations, or sensitive data.
9. Self-Assessment Method
9.1 Scope
Each self-assessment should define:
- the commons being assessed,
- the resources in scope,
- the participants and affected parties in scope,
- the node or nodes in scope,
- the time period reviewed,
- the assessment type,
- and any exclusions.
Assessment types:
- key-element assessment,
- detailed principle assessment,
- process assessment,
- pilot-readiness assessment,
- post-incident assessment,
- federation-readiness assessment.
9.2 Responsibility
The assessment should identify:
- assessment owner,
- participating stewards,
- participant representatives,
- technical reviewers,
- ethics or safety reviewers where applicable,
- and external reviewers where useful.
Small commons may use a lightweight assessment. Higher-risk commons should use
more independent review.
9.3 Reporting
Assessment results should include:
- maturity score for each Ostrom principle,
- key-element maturity score for management areas,
- evidence reviewed,
- strengths,
- weaknesses,
- gaps to target maturity,
- improvement or innovation actions,
- responsible owners,
- resource needs,
- expected benefits,
- risks,
- and next review trigger.
Results should be communicated to relevant participants in an understandable
form.
9.4 Key-Element Assessment
In addition to the eight Ostrom principles, a commons should periodically
assess the governance system itself.
| Key element |
Evaluation question |
| Management focus |
Whose needs does governance balance over time? |
| Leadership |
Is authority transparent, accountable, and learning-oriented? |
| Strategy and policy |
Are mission, values, objectives, and policies deployed into practice? |
| Resources |
Are people, money, time, infrastructure, knowledge, and attention sufficient? |
| Processes |
Are governance activities defined, owned, interacting, and improved? |
| Monitoring and measurement |
Are results visible through reliable, privacy-preserving evidence? |
| Improvement priorities |
Are improvements driven by evidence and interested-party needs? |
| Learning |
Does the commons learn from success, failure, conflict, and change? |
This key-element assessment prevents the model from becoming only a checklist
of Ostrom principles. The commons must also have the management capacity to
keep those principles alive.
9.5 Detailed Principle Assessment
Detailed assessment should use the questions in Section 10 and the evidence
expectations in Section 11.
Each principle should be reviewed against:
- current maturity,
- target maturity,
- evidence,
- risks,
- gaps,
- improvement actions,
- innovation needs,
- and learning captured since the last assessment.
9.6 Self-Assessment, Audit, And Benchmarking
Self-assessment, audit, and benchmarking serve different purposes.
Self-assessment asks:
How mature is this commons, where are the gaps, and what should improve?
Audit asks:
Did the commons follow defined criteria, and is the governance system
effective?
Benchmarking asks:
What can this commons learn from other nodes, cooperatives, standards,
communities, or governance systems?
High-risk commons should not rely on self-assessment alone. They should use
independent review, audit, or benchmarking where needed to challenge local
assumptions.
10. Evaluation Questions
10.1 Boundaries
- Who belongs to the commons?
- Who does not?
- What resource is governed?
- What is private?
- What is shared?
- What rights exist?
- What obligations exist?
- How does a participant exit?
10.2 Local Fit
- What local conditions shape the rules?
- Are rules proportional to participant capacity?
- Are burdens and benefits aligned?
- Are vulnerable participants protected?
- Are economic incentives coercive?
- Are rules understandable to the actual community?
10.3 Collective Choice
- Who can propose a rule change?
- Who can object?
- Who decides?
- How are emergency changes handled?
- How are non-technical participants included?
- How are maintainers held accountable?
10.4 Monitoring
- What is monitored?
- Who monitors it?
- Who can see monitoring evidence?
- How is privacy preserved?
- How are monitors appointed and removed?
- How does the community review monitoring behavior?
10.5 Graduated Sanctions
- What counts as a violation?
- What responses are available?
- How are mistakes distinguished from abuse?
- How is repair handled?
- How are sanctions appealed?
- When must issues escalate to safety, ethics, QMS, legal, or regulatory
review?
10.6 Conflict Resolution
- How does someone raise a dispute?
- Who reviews it?
- What timeline applies?
- What evidence is needed?
- What confidentiality applies?
- What appeal path exists?
10.7 Rights To Organize
- What gives the commons authority to self-govern?
- What external obligations constrain it?
- What legal or contractual form supports it?
- Could a host, funder, vendor, or maintainer enclose it?
- Are export, exit, and portability rights protected?
10.8 Nested Governance
- Which decisions belong to individuals?
- Which belong to households?
- Which belong to nodes?
- Which belong to cooperatives or guilds?
- Which belong to protocol governance?
- Which belong to organization-level governance?
- Which require QMS, legal, or regulatory review?
- How does escalation work?
11. Required Artifacts
11.1 Commons Profile
Every applicable commons should define:
- commons name,
- purpose,
- resource boundary,
- participant boundary,
- roles,
- rights,
- obligations,
- entry process,
- exit process,
- data boundary,
- settlement boundary,
- monitoring approach,
- dispute process,
- enforcement approach,
- nested governance layer,
- external obligations.
11.2 Governance Process
The governance process should define:
- decision types,
- participant standing,
- rule-change path,
- emergency authority,
- recordkeeping,
- review cycle,
- escalation path,
- appeal path.
11.3 Monitoring Standard
The monitoring standard should define:
- monitor roles,
- monitored conditions,
- evidence limits,
- privacy limits,
- retention,
- auditability,
- monitor accountability,
- misuse controls.
11.4 Enforcement And Repair Standard
The enforcement and repair standard should define:
- violation categories,
- graduated responses,
- restorative actions,
- sanctions,
- suspension,
- removal,
- reentry,
- appeal,
- escalation.
11.5 Dispute Resolution Process
The dispute process should define:
- intake,
- triage,
- reviewer authority,
- confidentiality,
- timelines,
- evidence,
- outcomes,
- appeal,
- external escalation.
11.6 Nested Governance Map
The nested governance map should define:
- decision layers,
- authority boundaries,
- escalation triggers,
- de-escalation paths,
- protocol responsibilities,
- node responsibilities,
- organization responsibilities,
- QMS/legal/regulatory interfaces.
11.7 Self-Assessment Report
The self-assessment report should define:
- scope,
- assessment date,
- assessment owner,
- participants consulted,
- evidence reviewed,
- maturity scores,
- strengths,
- weaknesses,
- target maturity,
- gaps,
- improvement actions,
- risks,
- and next review trigger.
11.8 Commons Indicators And Review Records
Each applicable commons should define a proportionate indicator set.
Possible indicators include:
- participant trust feedback,
- unresolved dispute count,
- time to dispute resolution,
- repeated violation rate,
- sanction appeal rate,
- rule-change participation,
- steward workload,
- monitoring findings,
- monitoring misuse incidents,
- privacy incidents,
- exit completion time,
- resource scarcity signals,
- and improvement action closure.
Review records should show how indicator trends affected governance decisions.
12. Review Cadence
Ostrom maturity should be reviewed:
- at planned intervals,
- before launching an applicable commons,
- before expanding membership,
- before federating with another node,
- after significant disputes,
- after major rule changes,
- after safety or ethics findings,
- after monitoring shows adverse trends,
- during management review where applicable,
- and after evidence shows rules no longer fit local conditions.
Reviews should consider whether improvement, innovation, or learning is the
appropriate response. Not every problem requires a new rule; some require
better communication, training, technical controls, mediation, resources, or
retirement of a harmful process.
13. Improvement Planning
Every assessment should produce:
- current maturity score by principle,
- target score by principle,
- evidence supporting each score,
- gaps,
- improvement actions,
- owners,
- due dates where applicable,
- residual risks,
- next review trigger.
Improvement actions should be proportional.
Small household commons should not be forced into heavyweight bureaucracy.
High-risk cooperative, research, data, financial, or federated commons require
stronger evidence.
14. Relationship To Other Pancakes Governance
14.1 Standards Model
The Standards Applicability Profile determines whether Ostrom review applies.
Ostrom review should be activated by:
- cooperative systems,
- shared governance,
- community nodes,
- data cooperatives,
- service exchange,
- shared resource pools,
- federated nodes,
- cooperative treasuries,
- or other commons-like project characteristics.
14.2 Common Good Model
The Common Good Model defines what collective flourishing means.
The Ostrom Governance Model defines how a commons demonstrates that its
collective governance is durable, accountable, and legitimate.
14.3 Stewardship Model
The Stewardship Model defines responsibility and care.
The Ostrom Governance Model tests whether stewardship has institutional form:
- roles,
- records,
- monitoring,
- dispute paths,
- repair,
- nested authority,
- and sustained review.
14.4 Ethics And Safety
Ostrom alignment does not replace ethics or safety review.
A commons may be participatory and still unsafe.
A commons may be locally legitimate and still exploit vulnerable people.
Ethics and safety reviews remain required where triggered by intended use,
data sensitivity, economic participation, health claims, AI behavior, or other
risk factors.
15. Non-Goals
This model does not:
- certify legal compliance,
- replace QMS review,
- replace safety cases,
- replace ethics review,
- require every project to become a cooperative,
- require every decision to be made by vote,
- treat all local preferences as acceptable,
- allow communities to override participant rights,
- or turn governance into performative bureaucracy.
16. Success Criteria
The model is effective when Pancakes can show that an applicable commons:
- has clear participant and resource boundaries,
- uses rules that fit local conditions,
- lets affected participants shape operational rules,
- monitors resource health and rule observance without surveillance abuse,
- handles violations through proportionate graduated responses,
- resolves conflicts through accessible local processes,
- preserves the right to self-organize,
- routes decisions through nested accountable layers,
- improves after evidence,
- and prevents platform enclosure.
The practical test is:
Can participants govern a shared resource together, repair harm, adapt
rules, and exit cleanly without the platform becoming their ruler?
17. References
- Elinor Ostrom,
Governing the Commons: The Evolution of Institutions for
Collective Action, Cambridge University Press, 1990.
- Elinor Ostrom,
Beyond Markets and States: Polycentric Governance of
Complex Economic Systems, American Economic Review, 2010.
- ISO 9004:2009,
Managing for the sustained success of an organization - A
quality management approach.
- Johan Linaker and Per Runeson,
Sustaining Open Data as a Digital Common -
Design principles for Common Pool Resources applied to Open Data
Ecosystems, 2022.