Dozens who never speak, around one shared risk.
A shopping centre is run by parties who rarely meet — the landlord, the facilities operator, dozens of tenants, and the cleaning, security and M&E contractors moving between them. They share the same structure, the same fire strategy and the same crowd, yet the memory of what was checked lives in a dozen logbooks that never reconcile. When a crack is seen, a fire exit blocked or a check skipped, the risk is shared but the proof is fragmented. This study reads the mall as those many operators and shows how one witnessed, tamper-evident record spans every tenant and contractor — without any of them surveilling another.
No single party sees the whole building, yet all share its risk — which is exactly why lapses collect in the gaps between them.
Owns the structure and its value; carries ultimate liability for the shared parts.
Coordinates common areas, security and M&E across the whole site.
Dozens of independent businesses, each with its own fit-out, staff and checks.
Cleaning, security, mechanical — present everywhere, accountable to several masters.
The shared-risk moments — each a place where memory could be witnessed instead of scattered.
| Zone | The judgment | Who carries the risk |
|---|---|---|
| Structure | Cracks, movement, structural inspection escalated | Owner → all |
| Fire / egress | Fire doors, escape routes, exits clear and checked | All parties |
| Common areas | Cleaning, spill response, floor condition attested | FM → owner |
| Tenant fit-out | Works signed off to code before hand-back | Tenant → owner |
| Plant / M&E | Lifts, HVAC, sprinklers serviced on schedule | FM → owner |
A passive node sits at each shared-risk point — the fire door, the plant room, the service corridor, the tenant threshold. Peel-and-stick, no wiring, no camera; a tap opens a web page, nothing installed on any phone.
No power at the node. Powered by the phone for the instant of the tap.
A web page opens on tap. No app on any device, ever — shared or mounted devices where personal phones aren't wanted.
A small disc set into the surface — invisible until needed.
A contractor or tenant taps at the point and confirms one thing.
Separate from the operator’s view: the centre’s live state and its history across every tenant and contractor.
Mockup · illustrative data over 12 months.
The same witnessed record is read many ways — each party draws a different return, and none had it before.
| Party | What the one record returns |
|---|---|
| Owner | A defensible, site-wide safety and maintenance record — provable at insurance renewal, sale or inquiry. |
| FM operator | Proof of coverage across every common area and contractor — disputes closed with a record, not an argument. |
| Tenants | Fit-out and compliance attested and portable — protection when a shared-part failure is wrongly pinned on a unit. |
| Insurers | Verified evidence that duty-of-care checks actually happened — not self-reported. |
Each unit, each contractor, each shift deepens the whole — shared value without shared surveillance.
Retail catastrophes rarely begin with a machine. They begin with a human check that was someone’s job, was often seen, but was never escalated or recorded.
Sampoong Department Store, 1995 — cracks were seen the morning of the collapse but not escalated; 502 died. A witnessed, escalating record is exactly the missing link.
Blocked or unchecked fire exits turn a manageable incident into a fatal one — the defence is provable, timestamped checks.
Illustrative; verify at source before external use.
Symbious doesn’t replace the CAFM, the fire-strategy or the tenant handbook a centre already runs. It’s the verified-capture layer beneath them — the record made at the threshold, at the moment, by the person who judged it — witnessed, tamper-evident, and portable across every tenant, contractor and change of managing agent.
The record proves that a role attested to a condition, at a time — never who, and never their movement across the site. In a building with dozens of operators this is what stops one party turning the record into surveillance of another’s staff. Ten unamendable prohibitions, published to the public domain.
These close the pilot’s open points — zone, party, evidence, attestation, language, controller, boundary. Select or type, then assemble and send.