Nairobi · Audit report
How FCTE actually works.
FCTE · Evidence Library
Connected-domain synthesis
Why a City Twin™ isn't 20 separate synthetic datasets sitting next to each other.
Every domain FCTE generates — health, employment, housing, land, insurance, and the rest — resolves back to exactly one of two canonical identities: a person (Citizen) or an organization (Business). A citizen's employer is a real row in the Business domain, not a text label; their household is a real row in the Household domain; their insurance coverage references their actual employment history, not an independent random draw. That single shared root is what makes cross-domain questions answerable at all — "does housing informality change utility-connection odds?" or "does employment status predict insurance coverage?" — because the connections are real recorded relationships, not coincidences of matching names. It's also why a change in one domain (a citizen's death, a business closing) has to propagate correctly everywhere that citizen or business is referenced, which is exactly what the platform's temporal-integrity and relationship checks are built to catch.
Historical reconstruction
Why the timeline starts in 1940 and is built forward, not assembled backward from today.
A synthetic "history" that's just today's snapshot with older-looking dates stamped on it doesn't hold up under scrutiny — birth cohorts wouldn't track real demographic events, employment histories wouldn't respect when institutions actually existed, and death records could reference events after a person's own death. FCTE instead generates forward from a single fixed starting point (1940) using real historical and demographic reference data as it goes, so a citizen born in 1962 has a plausible life shaped by the events of their actual decades, not a life invented purely to match a 2026 boundary. This is also why temporal-integrity checking is a first-class, platform-wide concern rather than a one-off validation step: every domain that adds a date-bearing record is checked against the same guarantee — nothing happens before birth, nothing happens after death, nothing is ordered before its own cause.
Certification design
Why "certified" is six separate questions, not one score.
A single pass/fail number hides more than it reveals — a dataset can be perfectly consistent internally while resting on an unrealistic assumption, or perfectly realistic in its distributions while quietly violating referential integrity. FCTE's certification framework asks six independent questions instead: do the structures and relationships hold together (Structural Integrity), do the distributions and counts look real (Statistical Integrity), does the timeline behave (Historical Integrity), is every record genuinely synthetic (Privacy Assurance), does the same input reliably produce the same certified output (Reproducibility), and can every number be traced to a documented source or assumption (Explainability)? A release only earns its badge when all six are satisfied — and where a check currently fails, the release still ships with that failure disclosed rather than hidden, which is the same posture this Evidence Library takes.
These write-ups describe design intent and public outcomes only. Internal construction methods remain controlled — see Certification for the live pass/fail results these ideas produce.