Subchapter 3.1 · Lyon, France

Setting: Lyon, France

A hotel kitchen during service, copper pans above the range. At the centre stands the internal auditor in a navy suit, a closed folder held against her. Beside her a visiting chef from another hotel of the group dips his own slim probe into a container of stock and points to the place she should watch. Behind them the hotel’s executive chef stands with his arms folded.

Three people, three positions. The executive chef knows this kitchen better than anyone and cannot be the one to judge it. The auditor is free to say what she finds and could not, alone, have known where to look. The visiting chef lends her his eyes.

The one who knows, and the one who is free to say: the upper plaques name two requirements the hotel had been treating as one. Knowledge joins the team is how they meet, through a technical expert who advises and does not decide. The auditor concludes says where the judgement stays.

The plate does not diminish the chef, whose offer to audit his own kitchen was generous. It shows why competence without distance proves little, why distance without competence sees only paper, and how a hotel can have both in the same room.

Subchapter 3.2 · Bologna, Italy

Setting: Bologna, Italy

A crowded breakfast room early in the morning of a trade fair. In the foreground a young cook tips a fresh tray of scrambled eggs into a chafing dish, on top of what was left of the old one. Beside him the internal auditor writes in a small notebook; the breakfast manager watches with him.

The gesture takes two seconds. For three years the hotel had audited breakfast at ten o’clock in November, when the room was being cleared. The composition places the auditor inside the crowd, at the hour when the eggs are actually replenished.

The quiet weeks were audited, the busy ones never: the upper plaques describe a programme built around the convenience of the hotel. Audit the risk when it is there, not when it is convenient: the lower plaques turn the calendar round, so that the dates follow the service.

The plate does not blame the cook, who is feeding a queue as fast as he can. It shows that an audit programme is a set of choices about when to look, and that a hotel which looks only when nothing is happening will go on finding that nothing happens.

Subchapter 3.3 · Cairo, Egypt

Setting: Cairo, Egypt

The hot counter of a large breakfast buffet, steel dishes of eggs and ful under warm lamps, a blank card in front of each. The internal auditor, in a dark suit, holds two clipboards: one yellowed with use, the other new and white. Facing him a cook in a tall hat pauses with a serving spoon in the eggs, his other hand at his chin.

The two clipboards are two editions of the same standard. The old checklist had eighteen pages, every one signed, and it had been used for years to audit a system that no longer existed. The composition holds old and new side by side, with the food and the cook in front of them.

The checklist was complete, for a standard that had changed: nothing in it was careless, and all of it was aimed at the wrong target. Criteria come before questions is the order an audit must follow. Know what you compare against is what turns a tick into a finding.

The plate does not accuse the auditors who filled in the old pages faithfully. It shows how easily diligence attaches itself to a form, and an auditor who now knows, before he asks the cook anything, what the answer will be measured against.

Subchapter 3.4 · Seville, Spain

Setting: Seville, Spain

A tapas kitchen in an old courtyard hotel, blue and yellow tiles along the wall, a thick tortilla in the pan and a basket of eggs in front. The internal auditor, a folder under her arm, asks a question with an open hand. The young cook turns from the stove and points up at the board above his station.

He is pointing at the rule. She had asked him why. He can recite what the sign says about eggs, and his test score confirms it. What he cannot say is what the rule is for, and so on the Sunday when the right egg ran out he solved the problem in the way that seemed sensible.

He knew the rule, he did not know why: the upper plaques separate two things a training record cannot tell apart. Ask the reason and the response, not only the rule: the lower plaques give the auditor her questions, and the last shows what a person will do when the rule runs out.

The plate does not belittle the cook, who is quick, careful and proud of his tortilla. It shows a brigade given rules to endure and not reasons to act on, and an auditor who has learned that training is audited at the stove.

Subchapter 3.5 · Hobart, Australia

Setting: Hobart, Australia

An oyster shed on the coast, wooden crates and wet boots by the door. The hotel’s food safety team leader holds a tray of opened oysters on ice and looks at its label. Behind her the purchasing manager writes on a clipboard. Facing them the grower, in a cap and a waterproof apron, holds open his harvest book and puts a finger on a line.

She has brought one tray and is asking where it came from. The label does not say. The book records harvests by lease and by day, not by the batches packed for customers. The hotel’s file on this supplier was in order, and none of it could answer the question on the morning it mattered.

The questionnaire said yes, and the certificate did not cover this: the upper plaques are the supplier file, read again after three days of rain. Follow one tray backwards is the method. Verify in proportion says how much of this a hotel should do, and for whom.

The plate does not accuse the grower, who has supplied the hotel for years without a problem. It shows two people who trust each other discovering that trust and evidence are different things.

Subchapter 3.6 · Penang, Malaysia

Setting: Penang, Malaysia

A hotel lawn at night under strings of warm bulbs, set with street-food stations. At the satay grill a cook turns skewers over charcoal and goes on working. Beside the station the internal auditor, in a plain chef’s jacket, crouches to look into the bin under the bench. Behind her the food safety team leader holds up a small test strip.

On her first visit she had arrived in office clothes with a tablet, and the whole lawn had changed within a minute. This time she looks at what cannot be rearranged when an auditor appears. The bin holds three hours of evidence. The strip measures a sanitiser made up at six.

People change in a minute, traces of three hours do not: the upper plaques are the lesson of the first audit. Arrive in the flow is how she comes now. Read what the work leaves is where she looks, at what the service has left behind without thinking about it.

The plate does not treat the cooks as people to be caught. They behaved as anyone behaves when watched. It shows an auditor who has stopped auditing her own arrival, and a cook so used to her that he does not look up.

Subchapter 3.7 · Tallinn, Estonia

Setting: Tallinn, Estonia

A small office in an old-town hotel, limestone walls and lamplight. The group quality manager leans towards a laptop and points at the edge of a blurred video image of a steel kitchen. Beside her the operations director watches, a hand at his chin. On the second screen stands a plain column of coloured tiles.

The two screens are the two halves of a remote audit. The column of tiles is the alarm log, and through a screen she could read every line of it. The kitchen picture froze in the cold room, blurred under the pass, and never showed that a hand-wash basin stood blocked behind a trolley.

The camera saw the records, it did not see the basin: the upper plaques are the result of auditing the same kitchen twice. Choose the method per criterion replaces a decision made once for the whole audit. Say what was not audited is what a remote report owes its reader.

The plate does not reject the camera, which saved days of travel and read the documents well. It shows two people learning what a screen can prove, and where somebody still has to walk in.

Subchapter 3.8 · Taipei, Taiwan

Setting: Taipei, Taiwan

The pass of a Cantonese restaurant during service, bamboo steamers under the heat lamps. A waitress in a black uniform holds her hand flat beside a small glass bowl of mango pudding topped with crushed peanuts. Facing her the internal auditor holds out a small blank card. Behind the pass a cook looks up.

The pudding is not going anywhere. She remembered the guest’s allergy from the evening before; the ticket had not mentioned it. In the hotel’s register this moment did not exist, because the guest never ate the pudding. The card is the smallest possible record, a few lines filled in at the pass.

Nothing happened, so nothing was written: the upper plaques are the logic of every kitchen that keeps a clean register. Every stop is information says what was being thrown away each day. An empty register proves nothing is the auditor’s conclusion about two entries in a year.

The plate does not look for the person who left the allergy off the ticket. It honours the one who caught it, and shows a hotel discovering that its safest moments were its least recorded.

Subchapter 3.9 · Bogotá, Colombia

Setting: Bogotá, Colombia

A small preparation room behind a juice bar before dawn, crates of tropical fruit all around. At the sink a cook washes fruit in a basin of water. The food safety team leader holds a plastic bottle of disinfectant up beside the procedure on the tiled wall. Next to her the internal auditor writes in his notebook.

She is comparing what the wall asks for with what the room provides. The dose on the sign was written for a disinfectant the hotel no longer buys, and the bottle in her hand is half as strong. Three samples had failed in one year, and three investigations had each named a different person.

Three times the same cause, three different people: the upper plaques are the pattern nobody saw while the records were read one at a time. Human error is not a cause is the sentence that reopens them. Ask why it was possible moves the investigation from the person to the place.

The plate does not blame the woman at the sink, who is doing what the room allows. It shows an investigation that had stopped at the first plausible answer, and two people standing where the work is done to find the next one.

Subchapter 3.10 · Muscat, Oman

Setting: Muscat, Oman

The cold kitchen of a seaside resort, white tiles and trays of cut fruit, frost on the cold room door behind. The internal auditor steadies a glass jug of crushed ice and water on the bench. Facing him a cook holds his own digital probe in the ice and watches its small display, waiting for the reading to settle.

The jug is the oldest reference there is: melting ice has one temperature, whatever any register says. The hotel’s register listed thirty-four probes as calibrated, with a tick for every month and not one reading. The auditor carried the jug round the kitchens and asked each cook to test his own probe.

The register said calibrated, the jug of ice said otherwise: the upper plaques set a document against a fact. Test the instrument, then the paperwork is the order the lower plaques give, the reverse of the usual one.

The plate does not accuse the cook, who uses the probe he was given and believes what it tells him. It shows that every temperature in a food safety system rests on an instrument, and that the check takes a jug, some ice and a minute.

Subchapter 3.11 · Osaka, Japan

Setting: Osaka, Japan

A table beside a Japanese restaurant kitchen, pale wood and a paper screen. At the centre the internal auditor reads a thick hazard analysis open at a page of ruled grids, his chin on his hand. On his right a technical expert, grey-haired and in a cardigan, points to one cell. On his left the food safety team leader takes notes. A lacquer bowl of dashi steams on the table.

The cell he is pointing at is a score. The plan was followed in every detail, and two years of audits had confirmed it. Nobody had asked whether the scores behind the limits were right. The bowl on the table is one of them: the stock that underlies most of the hotel’s cooking, rated at the lowest likelihood with three words of justification.

The plan was followed, was it right: the upper plaques separate two questions an audit usually treats as one. Test the reasoning, not the agreement: the lower plaques say what the auditor and his expert are doing, following each judgement back to its grounds.

The plate does not accuse the team that wrote the analysis with great care. It shows that a hazard analysis is an argument, and that an argument can be examined.

Subchapter 3.12 · Vancouver, Canada

Setting: Vancouver, Canada

The pass between a hotel kitchen and its restaurant during dinner, plates of salmon crusted with sesame under the lamps. The internal auditor holds up a kitchen ticket. A waiter in a black apron points to the place on it where something should be written. The chef leans in from the kitchen side to look.

Three people are looking at one small piece of paper, and each belongs to a department that had passed its audit. The allergy the guest declared at registration was lost between them, at a hand-off that no department owned. The ticket is where the loss becomes visible.

Every department did its part, the allergy fell between them: the upper plaques explain how clean reports and a wrong plate can exist together. Follow one case end to end is the method. Every hand-off is a question tells the auditor where to stop and ask.

The plate does not look for a guilty department, because there is none. It shows three competent people seeing, for the first time, the whole path of something each had only seen a part of.

Subchapter 3.13 · Vienna, Austria

Setting: Vienna, Austria

A boardroom in a palace hotel, gilded panelling and a long polished table. The owner’s representative reads a slim report opened at its first page, her chin on her hand. Beside her the internal auditor points to a line on that page. Next to them lies a thick report, closed. At the far end of the table the general manager waits.

The thick report is last year’s: forty findings in the order of the standard’s clauses, with the only serious one on page sixteen. The owner read the first pages carefully, as she always does. The slim report is the same audit written for her, with what she must decide on the page where she begins to read.

Page sixteen was too late, the finding never reached her: the upper plaques are the failure, and it was a failure of form. The conclusion comes first, then the decision: the lower plaques are the new order of the report.

The plate does not blame the owner for not reading to the end, nor the manager who summarised in good faith. It shows that an audit is finished only when the person who can act has understood it.

Subchapter 3.14 · Durban, South Africa

Setting: Durban, South Africa

A banqueting kitchen at night, the benches crowded with plated desserts. At the hand-wash basin the internal auditor has opened the paper towel dispenser and found it empty; her other hand is turned up. Beside her a banquet steward in a white jacket arrives with a pack of towels. Behind them the executive chef stands at a rack of trays.

The finding about this basin had been closed months earlier, with a photograph of a new dispenser fully stocked, taken on a quiet afternoon. She has come back at the hour and on the night when the problem was first found. The refill arrives a moment after the auditor.

The photo was from a Tuesday, the problem was on Saturday: the upper plaques say why a closure can be true and still prove nothing. Done, working, holding names three stages an action passes through. Close on evidence is the rule for what the word closed may mean.

The plate does not catch anyone lying. It shows the distance between an action taken and a problem solved, and an auditor willing to stand in it on a Saturday night.

Subchapter 3.15 · Porto, Portugal

Setting: Porto, Portugal

The owner’s office, blue and white tiles along the walls. On the desk lies a large sheet with three columns of coloured blocks: green, red and grey. The owner studies it with his hand at his chin. Beside him the internal audit lead rests one finger on a grey block. On the wall hangs a framed single page.

The framed page is the policy he wrote himself, three promises in plain words. The sheet is what a year of audits says about them. Green is a promise kept, red one not kept, and grey, where her finger rests, one nobody tested.

The objectives were all met, the promises were not: the upper plaques set what a hotel measures against what it has said. Kept, not kept, not tested gives the three honest answers. A verdict on the whole is what the internal audit owes at the end of its year.

The plate does not accuse the owner, whose promises were sincere. It shows him reading his own words as claims that can be checked.

Subchapter 4.1 · Brussels, Belgium

Setting: Brussels, Belgium

A meeting room in a city hotel, lamplight and a long dark table. The quality manager holds the hotel’s framed certificate upright beside an open laptop and points to it. On her left the general manager leans in, his hand at his mouth. Across the table a procurement officer waits with her hands folded on her notes.

The certificate had hung in the lobby for four years and gone out with every tender. It is genuine. The procurement officer asked one question, by whom it was accredited, and the answer was that for food safety it was not. The composition sets the frame against the screen where the chain behind a certificate can be looked up.

A real certificate, without the chain behind it: the upper plaques say precisely what the hotel held. Check every link is the work, from the certificate to the body, from the body to its accreditation and its scope. In five minutes says how little that takes once someone knows the steps.

The plate does not accuse the hotel of deception; it had believed its own certificate. It shows a hotel learning to read the document it had only ever displayed.

Subchapter 4.2 · Barcelona, Spain

Setting: Barcelona, Spain

An office in a modernist hotel, carved wood, ironwork and painted tiles. Three quotations lie open side by side on the desk. The quality manager speaks on the telephone and takes notes with her free hand. Beside her the general manager has picked up some of the pages and studies them closely.

Three bodies, all properly accredited, had sent three prices. She is on the telephone because the price was the only thing the quotations made easy to compare. Who would actually come? What had that auditor audited before? Was the help on offer independent of the judgement?

Three prices, three different services: the upper plaques undo the idea that the quotations describe the same thing. Choose who will judge you, not the document: the hotel is choosing a person who will stand in its kitchens for years, and a certificate is only what that person leaves behind.

The plate does not condemn the cheapest offer, or the manager drawn to the one that promised a smooth certification. It shows a week of questions that changed a purchase into a choice.

Subchapter 4.3 · Busan, South Korea

Setting: Busan, South Korea

The raw fish restaurant of a beach hotel, glass tanks of live fish and shellfish along the wall. The certification auditor holds a single application form and looks up at the tanks. Beside him the quality manager and the general manager count on their fingers. Behind them a cook lifts a fish from a tank with a net.

The form in his hand says one hazard study and a hundred and forty employees. The room he is standing in is one of six operations with hazards of their own, and by August nearly three hundred people will work in the building. The manager had wanted to negotiate the audit days down; here he is counting instead.

One plan on the form, six kitchens in the hotel: the upper plaques are what the first morning revealed. The days follow the figures says that audit time is derived, by rules, from what the hotel declares. Declare the hotel in August tells it which version of itself to put on the form.

The plate does not accuse the quality manager, who answered each question as she understood it. It shows that an audit sized for a smaller hotel is not a saving.

Subchapter 4.4 · Amsterdam, the Netherlands

Setting: Amsterdam, the Netherlands

A production kitchen at the back of a canal-house hotel, sandwiches and salads lined up for packing. The quality manager holds two framed certificates, one in each hand, and looks from one to the other. Beside her the general manager studies them. At the bench a cook closes an insulated box. Through the loading door a van stands ready.

The two frames look almost alike, and that is the point. One is the certificate the hotel holds, sound and accredited. The other is what the client’s tender asked for, a scheme that contains the same standard and adds requirements of its own. The boxes and the van are the business that depends on the difference.

Our certificate was good, it was not the one asked for: the upper plaques separate quality from fit. Ask who requires what is the question to put to every buyer. Before the tender says when: five months is enough to extend a certification, and five days is not.

The plate does not say the hotel’s certificate was worth less than it thought. It shows a manager who read the specification slowly, and a hotel learning that a requirement belongs to the one who sets it.

Subchapter 4.5 · Nairobi, Kenya

Setting: Nairobi, Kenya

The new café of a hotel conference centre, a display case of sandwiches and pastries, and nobody yet behind the counter. At the centre the certification auditor closes a binder on the table with both hands and gives a small, kind shake of the head. Facing her the general manager spreads his hands. Beside her the quality manager holds her list.

The café opened in January and is not yet in the hazard analysis. The water treatment is not validated, and the management review has been postponed twice. The general manager had called the first stage a rehearsal. The closed binder is the auditor’s answer.

Not a rehearsal, a judgment on readiness: the upper plaques correct a common idea of what Stage 1 is for. Not yet is a result, the cheapest one: to hear not yet now costs a few weeks; to hear it at Stage 2 would have cost far more.

The plate does not show a failure. The quality manager had answered honestly when asked how ready they were, and the auditor is not unkind. It shows the moment a date gives way to a state of readiness.

Subchapter 4.6 · Salvador, Brazil

Setting: Salvador, Brazil

A hotel pool deck at lunchtime in full sun. At a small stall a baiana in white lace and a head wrap fills fritters to order, a spoon of golden vatapá in her hand. The certification auditor, in a light jacket, looks down at the steel container on her counter. Beside him the quality manager holds her papers. Behind them guests wait in line.

On the first day the documents were complete: a time limit for the paste at ambient temperature, and a record signed at eleven every morning. He has come back at twenty to one, with the hotel full. The container stands in the sun, and the woman tells him without unease when the paste was made.

The record said eleven, the service said otherwise: the upper plaques put two days of the audit side by side. Conformity and effectiveness are the two things a Stage 2 audit must find. Seen at full service says where the second one is found.

The plate does not accuse the baiana, whose craft is older than the hotel. It shows a control that was written, signed and never made part of her work, and an auditor who knew at what hour to come.

Subchapter 4.7 · Mumbai, India

Setting: Mumbai, India

The general manager’s office in a seafront hotel, dark wood and lamplight. The certification auditor, grey-haired and in a grey suit, rests one hand on the minutes of the management review and asks a question with the other. Facing him the general manager holds a wedding contract open and frowns at it. A slim presentation lies closed at the edge of the desk.

The presentation was what the general manager had brought: objectives, a signed policy, an organisation chart. The auditor set it aside after the first slide. The minutes record a blast chiller deferred and a second officer declined. The contract allows outside caterers into the hotel’s kitchen. Both carry a signature.

Commitment can be declared, leadership is decided: the upper plaques are the difference between the presentation and the minutes. Show the decisions, from the leader: nobody else in the hotel can give evidence of what its leader chose.

The plate does not portray a careless manager. He had a difficult year and trusted his chef. It shows a man reading his own decisions as an auditor reads them.

Subchapter 4.8 · Chicago, United States

Setting: Chicago, United States

A meeting room in a large downtown hotel, three sheets laid side by side on a dark table. Each carries a row of coloured bars: on one the bars climb, on the others they shorten. The certification auditor leans over them, her chin on her hand. On her left the food safety team leader points with a pen at the rising bars. On her right a revenue analyst sits at his laptop.

For three years the hotel had met all five of its objectives. The sheets are the same data read as series: complaints still under the limit while the share about allergens climbed, deviations steady in number and gathering in one kitchen. The analyst is there because nobody had ever put the years together.

Every objective was met, three trends were not seen: the upper plaques set a result against a direction. Read the years together is what an hour with the data achieved. Then decide gives the management review something to do beyond recording that targets were reached.

The plate does not question the numbers; every one was accurate. It shows an auditor who asked to see what lay underneath the results.

Subchapter 4.9 · Punta Cana, Dominican Republic

Setting: Punta Cana, Dominican Republic

The edge of a beach club in an all-inclusive resort, a wooden bar under thatch, a grill, sun loungers among the palms. A rope on wooden posts marks the boundary, and on it stands a blank sign. The multi-site auditor rests a hand on the sign and asks a question. Beside him the group quality director holds her clipboard. Behind the bar the concession holder listens.

The guest with a wristband does not see the rope. The grill behind the bar belongs to another business, on the resort’s own sand. The company wanted one certificate for all its properties; the auditor found four separate systems and, at each resort, uncertainty about which outlets were inside.

Four systems, one logo is what he found behind the wish. Where does the certificate end is the question he put at every resort. One system, many sites is the condition for certifying a group together. Every outlet decided means in or out, on purpose.

The plate does not accuse the concession holder, who runs his club as his contract allows. It shows that a group certificate rests on a central system that really governs, and on an edge someone has drawn.

Subchapter 4.10 · Munich, Germany

Setting: Munich, Germany

A Bavarian hotel kitchen, pretzels piled in a basket, a wooden bowl of orange cheese spread, a tray of white sausages. The food safety team leader, in whites and a striped apron, holds an audit plan divided into three coloured columns and points to one small cell. The lead auditor studies it, her hand at her chin. Beside them the quality and environment manager holds a second copy.

The three columns are three standards audited together, by one team, in four days instead of six. The cell under her finger is the time given to the kitchens for food safety: three hours on a weekday morning. She is showing them where the two days came from.

Two days were saved, from the kitchen: the upper plaques are the arithmetic of the combined audit. Combine what is shared is the sound part of the idea. Keep depth where it is not protects what only a food safety auditor, in the kitchen at the right hour, can see.

The plate does not oppose the combined audit, and nobody here acted in bad faith. It shows a team leader who did not find a clean report reassuring, and who read the plan to find out why.

Subchapter 4.11 · Fez, Morocco

Setting: Fez, Morocco

The courtyard of a riad, carved plaster arches, a tiled fountain and orange trees. At a low table set with mint tea and a pastilla dusted with sugar, the quality manager hands a thick bound file to the certification auditor. Beside them the general manager holds a single sheet and looks at the file.

The single sheet was the hotel’s first response to a major nonconformity on allergens: the labels reprinted, the waiters retrained, the matter closed. The thick file is the second. It holds the correction, the reason the buffet list had drifted from the recipes, the action taken on that cause, and proof of each.

One page was not enough, correction is not cause: the upper plaques explain why the first answer came back. Evidence, not promise is what the body must receive before it can close a finding. Within the deadline is the condition on which the certificate stays valid.

The plate does not show a hotel in disgrace. It shows the difference between fixing a label and understanding why it was wrong, and a response that can be weighed in the hands.

Subchapter 4.12 · Montevideo, Uruguay

Setting: Montevideo, Uruguay

A hotel rooftop terrace with a wood-fired grill, beef and sausages over the embers. The grill cook, in a leather apron, turns the meat. Next to him the certification auditor holds the hotel’s framed certificate and looks from it to the grill. Beside her the quality manager holds open a register and points to a ruled page.

The certificate is two years old. The grill opened in the second of those years and became the hotel’s most profitable outlet. It is not in the scope, not in the hazard analysis, and its meat comes from a supplier nobody evaluated. The register is what the hotel keeps now: every change, written down when it happens.

The grill was new, the certificate was not: the upper plaques are what a surveillance visit found. Changes reach the system is the duty that had lapsed. Every year, not every audit says who keeps a certificate alive: the hotel, on the days when no auditor is there.

The plate does not blame the grill cook, who was never told he worked inside a certified system. It shows that a certificate describes a hotel on a date.

Subchapter 4.13 · Colombo, Sri Lanka

Setting: Colombo, Sri Lanka

A quiet back office in a large hotel. The certification auditor sits at a desk and reads a thick incident file. Beside him the food safety team leader points to a page. Behind them the general manager stands with his hands clasped. To one side a chest freezer stands open, showing rows of small sealed pots: the samples the hotel keeps from every banquet dish.

There is no guest in this picture and no dining room. The subchapter reads the file, and so does the plate. The pots are why the laboratory could name the station within days. The pages record what the hotel did hour by hour, and the gap it found: a rule on illness that never reached the agency cooks.

The certificate did not promise that nothing would happen: the upper plaques say what a certificate is not. It promised a response is what it is. Read the file, not the scene tells the auditor, and the reader, where the evidence of that system lies.

The plate does not look away from what happened, and it does not display it. It shows a hotel being judged on how it answered.

Subchapter 4.14 · Tbilisi, Georgia

Setting: Tbilisi, Georgia

A meeting room in a hillside hotel, carved wood and a view of green slopes. The certification auditor reaches across the table and turns a small jar of walnut preserve so that its round sticker faces the general manager. He looks at it, his hand at his chin. Beside him the marketing manager holds a menu open.

She bought the jar in the lobby shop the evening before. The preserve is made by a family in a village, not by the hotel, and it is in no scope. The sticker told every guest who bought one that the product was certified. The menu carried the same claim in a gentler form.

The system is certified, not the jar: the upper plaques draw the line the marketing had crossed. Claim what the certificate says, nothing more: a certificate speaks about a management system and a scope, and its mark may say only that.

The plate does not mock the marketing manager, who was proud of the certificate and wanted guests to know. It shows how a true statement becomes a false one on the wrong object, and an auditor who made the point with a jar.

Subchapter 4.15 · Auckland, New Zealand

Setting: Auckland, New Zealand

A hotel garden at dusk, steam rising from an earth oven behind. Wire baskets of lamb and root vegetables have just been lifted out. The food safety team leader pushes a long probe into a shoulder of lamb and writes on a sheet with her other hand. Beside her the head cook of the feast watches. Across the table a tour operator’s buyer looks on.

Nobody has stopped for this. The reading takes a few seconds and is part of the evening now. What the buyer came to see is in front of her: the system at work on an ordinary night, in the hands of the people who cook.

A certificate is where trust begins, the proof is on the plate: the upper plaques give the certificate its place, real and limited. Every day after is where excellence lives. The helm and the lens names the two instruments of the series, the one that steers and the one that looks.

The plate ends on a probe, a number written down and a cook who watches calmly, because the check has become his own. It shows what the thirty hotels of this volume were working towards: food that is safe when nobody has come to check.