Kondele kulikuwa na duka la devices na SIM ambalo SawaLink ilitumia kwa activation support. Aisha hakwenda kuomba list ya watu wote waliopata namba recycled. Alijua hilo lingekuwa njia rahisi ya kutengeneza database kubwa ya watu wasiokuwa na uhusiano na case.
Manager, Hassan, alisoma authorization yake mara mbili.
“Unataka nini hasa?”
“Batch window. Namba ambazo zilirecycle katika kipindi hiki, kwa tokenized references. Sitaki names, ID numbers wala customer contacts.”
“Na unataka kulinganisha na loan engine.”
“Kwa internal identifiers ambazo tunaweza map bila kuona subscriber mpya.”
Hassan akakubali baada ya legal review. Alionyesha process ya fiction network yao: number ikikaa inactive kwa muda uliowekwa, inaweza kurudi kwenye pool. Subscriber mpya akichukua, telecom feed hutuma activation event kwa partners.
“Feed haisemi huyu ni mtu yule yule,” alisema. “Inasema number active.”
“Na SawaLink ingestion inaonekana imeitafsiri kama identity continuation.”
“Hilo ni upande wenu.”
Aisha akakubali.
Waliunda extract yenye hashes badala ya full numbers. Hassan alituma batch receipt iliyokuwa na timestamps. Aisha akalinganisha na borrower-profile creation windows kutoka SawaLink.
Cases nyingi hazikuwa na shida. Recycled number ilipata customer mpya na system ikaomba onboarding upya.
Lakini kundi moja la legacy profiles lilikuwa tofauti. Closure codes za zamani hazikuwa kwenye exclusion mapping, hivyo ingestion service ili-link number mpya na historical customer key.
“Batch hii ilitumwa lini?” Aisha akauliza.
“Siku ya Jumatatu saa 18:10.”
Borrower profiles za Mama Atieno na Ouma Auma zilifunguliwa Jumanne usiku.
Hassan akasema, “Hiyo ni correlation, si kwamba feed yetu imetengeneza loan.”
“Agreed.”
Aisha aliomba receipt ya exact batch transmission, digital signature na schema version. Hassan akatoa redacted copy. Hakutoa customer list.
Wekesa, aliyekuwa kwenye video call, aliangalia schema.
“Version 3.1,” alisema. “Hii ndiyo iliyoanza kutumia `phone_status=ACTIVE` bila `identity_reset` flag.”
“Kwa nini identity_reset haipo?”
“Partner feed haina hiyo field.”
Hassan akavuta kiti. “Kwa sababu number recycle si sawa na identity event kwa kila partner. Nyinyi ndiyo mnapaswa kutengeneza rule.”
Aisha aliandika sentence hiyo, si kama law, bali kama system-design fact.
Walifanya test kwa sample ya hashes. Kwa legacy closure zilizo na code `DCS1`, SawaLink ili-reuse customer key. Kwa closures mpya `DECLOSED`, haikufanya hivyo.
“Migration bug,” Wekesa alisema.
“Partly,” Aisha akasema. “Bug inaweza kueleza identity collision. Haiwezi yenyewe kueleza auto-reserve journal, loan origination na snapshot timing.”
Hassan alionyesha kwamba batch transmission ilifika SawaLink siku moja kabla ya loans nyingi kufunguliwa. Hilo liliweka sequence: number recycled, activation feed ingested, old identity reattached, loan engine found active profile.
Aisha alihisi case ikikua, lakini alijizuia kufanya narrative moja kabla facts. Inawezekana system bug ilikuwa imefungua mlango, na mtu mwingine akautumia. Inawezekana loan rules zilikuwa zimefanya automation bila mtu.
Aliomba audit extract ya loan-engine triggers.
Victor alikataa request kupitia email, akisema reseller data ilikuwa outside scope ya acquisition issue.
Aisha alijibu kwa reference ya privacy-preserving extract na cases mbili tayari confirmed. Hakutuma raw customer information.
Dakika ishirini baadaye, IT security ikaidhinisha limited trigger review.
Hassan akasema, “Nataka copy ya data-retention note. Msiweke hashes milele.”
“Tutafunga retention pamoja na case.”
“Good.”
Kabla ya kuondoka, Aisha aliomba Hassan aeleze kwa maneno rahisi kitu kimoja kwa report: recycled phone number haithibitishi continuity ya mtu.
Hassan akaandika: **A number can return; a person does not return with it.**
Aisha alisoma na kuhisi sentence hiyo ilikuwa kubwa kuliko technical note.
Katika system yao, namba ilikuwa imekuwa shortcut ya mtu.
Hassan aliwaonyesha pia mfano wa namba recycled ambayo haikuwa na tatizo. Subscriber mpya aliingia, SawaLink ikapokea activation, lakini old profile ilikuwa imefungwa kwa code mpya `DECLOSED`; system ikaomba onboarding mpya na customer ID mpya. Aisha aliiweka sample hiyo pembeni ya Mama Atieno. Comparison ilionyesha tatizo halikuwa recycle process yenyewe, bali interaction kati ya legacy closure code na ingestion rule.
Wekesa akafanya query ya counts bila kutaja customers. Legacy `DCS1` records zilikuwa nyingi kuliko walivyotarajia, lakini ni sehemu ndogo tu zilikuwa na active recycled numbers. Aisha akazuia mtu kusema exposure ndiyo count ya DCS1 zote. “Risk population si confirmed harm,” alisema. Wakaweka categories: potential identity collision, loan profile created, reserve journal present, customer impact confirmed. Hiyo hierarchy ingekuwa muhimu wakati investor angeuliza “how many”.
Kabla extract haijatoka duka, Hassan alitaka deletion date iandikwe kwenye request. Privacy counsel wa SawaLink akaweka retention ya siku thelathini kwa hashes ambazo hazikuingia confirmed case. Aisha alikubali, kwa sababu investigation ambayo haiwezi kujizuia kukusanya data inaweza kuwa aina nyingine ya abuse. Batch receipt, schema version na activation windows vilitosha kuonyesha sequence bila kubeba majina ya watu ambao hawakuhusika.
Aisha aliomba Hassan aweke note kwamba activation batch inaweza kutumwa kwa partners tofauti kwa timings tofauti. Kwa hiyo “siku moja kabla” haikuthibitisha kwamba mtu SawaLink ali-request recycle kwa purpose ya loans. Sequence ilionyesha opportunity ya bug, si orchestration ya telecom side. Kwa kuweka limitation hiyo ndani ya report, walifunga mlango wa accusation ambayo ingeonekana kubwa lakini haikuwa supported.
Wekesa alitengeneza test ya local code bila production data. Alipoingiza `DCS1`, mfumo uli-link historical key; alipoingiza `DECLOSED`, ulidai onboarding mpya. Hassan aliangalia screen na kusema partner feed haingeweza kujua tofauti hiyo. Aisha akaweka owner wa remediation upande wa SawaLink, si reseller. Bug ilikuwa imetokea kwenye boundary, lakini responsibility ya interpretation ilikuwa kwa system iliyotumia data.
Hassan akahifadhi signature ya extract na Aisha akampa receipt ya file iliyopokelewa. Wote wawili walijua vendor dispute inaweza kutokea baadaye kuhusu data iliyotolewa. Chain ndogo hiyo ilifanya review iwe partnership yenye boundaries, si investigator akichukua chochote anachotaka.
Na activation batch ilikuwa imefika SawaLink siku moja kabla ya loans za marehemu kuanza kufunguliwa.