Tier 2 fragility takes three operational forms
The cases that bracket Tier 2's structural fragility — GISAID, DPN, MetaArchive — illustrate three distinct failure modes the architecture is exposed to:
-
Adversarial governance. GISAID (E-0025) shows that when governance turns adversarial, the platform can be wielded against parts of its own user community while the technology keeps running. Single-organization centralization within a Tier 2 operating model produces vulnerability identical in form to what the paper attributes to Tier 1.
-
Coordinator dissolution. Digital Preservation Network spent $7M over its run as a coordinator among five federated nodes. When DPN dissolved in 2018, the actual storage continued operating at the federated nodes, but the cross-node integrity contract — fixity audits, succession guarantees, consortium-level provenance — dissolved with the coordinator. Members had to renegotiate preservation node by node.
-
Silent operational failure. MetaArchive's 2025 sunset audit (E-0056) discovered that automated LOCKSS polling had not been replicating content the way it advertised. The cooperative had to collapse the distributed architecture entirely — manually consolidating every member's content onto a new audit node at Stanford — to recover. By Educopia's own statement, "it was not possible to secure a permanent archival home for all of MetaArchive's materials within the sunset time frame."
Tier 2 redundancy is contingent on the consortium operating correctly, with no independent verification path available to the institutions that depend on it. The three cases each demonstrate a different way that contingency fails — none of which is rare or surprising, all of which produce data-loss outcomes despite formal preservation infrastructure being in place.
The architectural implication is that Tier 2 is not a complete replacement for Tier 3 even within the disciplines where Tier 2 is well-funded; the absence of an independent verification path makes Tier 2 systematically vulnerable to silent failures that members cannot detect.