Box 22 Asks If The Work Is Enhanced. An Administrator Ticks It.
Nine institutions, 360 submissions, one tick-box. In six of the nine it is completed by a grants administrator working from the abstract alone. Every one of the 360 answers is correct. Two institutions learned this from our enquiry.
BETHESDA, Maryland — Box 22 is one line long and it has two options.
It asks whether the proposed work "would be reasonably anticipated to enhance the transmissibility or virulence of a potential pandemic pathogen." Yes, or no.
A "yes" is not a refusal. It routes the application out of the ordinary queue and into a departmental review that has now absorbed four years of hearings, two competing frameworks and a great deal of shouting.
This newspaper did not ask whether that review works. We asked something narrower: who physically ticks the box.
What we asked for
We wrote to seventeen institutions and asked for the 40 most recent applications at each that named a pathogen, together with the submission system's audit log for each form — the user account that keyed the answer, the timestamp, and whether the principal investigator's account ever opened the completed form.
Nine answered. Seven released the logs under records law. Two released them after a telephone call, on the view that a submission audit log is administrative metadata rather than research material.
That is 360 forms.
Who ticks it
In six of the nine institutions, Box 22 is completed by a grants administrator.
The administrator works from the abstract. This is not a lapse in the workflow; it is the workflow. At those six institutions the abstract is the only part of the proposal the compliance screen shows on the same page as the box. The research plan is four clicks away, and the logs show those clicks are rarely made.
In three of those six, the investigator's account never opened the completed form before submission. In 118 of the 360, a certification about pandemic pathogens went to a federal agency under a scientist's name without that scientist having seen the answer.
Every answer was right
Not one of the 360 was answered wrongly.
We paid two microbiologists who work with select agents, and who do not know each other, to answer Box 22 themselves from the 360 abstracts with the institutions and investigators stripped out. They agreed with the submitted answer 360 times out of 360. They disagreed with each other twice, on two proposals neither would have ticked yes.
Every submitted answer is "no", and almost none of them is close to the line. The 360 include catheter-infection surveillance, four nutrition trials, a vaccine cold chain in Malawi, and a great deal of work on soil bacteria.
The two who found out from us
Two of the nine institutions told us they had believed their investigators completed the box personally, and learned otherwise when they went to answer our request.
One has since added a required acknowledgement: the form cannot be submitted until the investigator's account has opened the completed compliance page. It took, their research office told us, an afternoon.
The other is still deciding.
What this is, and what it is not
It is not concealment. Nothing here was hidden, and we obtained all of it by writing letters.
It is not incompetence either. The administrators are transcribing an answer the scientist has already given, in the one document a scientist has every reason to make exact.
What we can say is this. The single control on which four years of argument has turned is, most of the time, operated by somebody whose job description does not mention pathogens, from a summary written by somebody else, on a screen that shows nothing else.
That may be entirely adequate. In 360 attempts it was. We found no case near the line, which means we have not seen the workflow tested, and the desk would rather say so than pretend that 360 easy questions answered correctly tells us how a hard one would go.
The six o'clock edition
Three stories a morning, in your inbox before the coffee is made.
Sources & Method
We did not ask whether the departmental review works. We asked a narrower and more answerable question — which user account keys the answer to Box 22 — and obtained the 40 most recent pathogen-naming submissions from each of nine institutions, with the submission system's audit log for each form. We then paid two microbiologists who do not know each other to answer all 360 boxes themselves from de-identified abstracts.
Who we spoke to
- Nine research institutions, Submission records for the 40 most recent applications naming a pathogen at each. Requested under state public-records laws and the federal act; seven released in full, two released after a telephone call on the basis that submission audit logs are administrative metadata March–July 2026 Three institutions asked what we intended to do with the audit logs. All three released them anyway.
- Marisol Quintana-Beddoe, Senior grants administrator, a public university in the Midwest, 19 years in post. Interviewed by telephone twice and then in person, with her employer's knowledge; given the full draft and three weeks to answer May and July 2026 Her reply is printed in full at the foot of this page and is the strongest argument against this story.
- Dr. Anselm Ruiz-Trevelyan, Institutional biosafety officer at the one institution where the biosafety office completes the box. Interviewed by video call; supplied his office's own internal audit of 300 prior submissions June 2026 His audit found the same thing ours did: no wrong answers, and nobody senior aware of who was answering.
- Two blind reviewers, Microbiologists who work with select agents, at different institutions, unknown to each other. Paid to answer Box 22 themselves from 360 de-identified abstracts, with no sight of the submitted answers July 2026 Agreed with the submitted answer on all 360. Disagreed with each other on two, on neither of which would either have ticked yes.
- A departmental policy official, Works on the review framework the box triggers. Interviewed on the record about policy and on background about practice; text of the box confirmed against the published form July 2026
What we could not confirm
- Whether any of the 360 should have been a 'yes'. Our reviewers answered from the abstract, which is the same material the administrators had. Neither we nor they saw the work as actually performed, and a proposal is a description of an intention, not a record of an experiment.
- Whether nine institutions tell you anything about the other several hundred. These are the nine that answered a records request. We asked seventeen. The eight that did not answer may differ from the nine that did in exactly the way that would matter, and we have no way to find out.
- How the workflow behaves on a hard case. In 360 submissions we found no application near the line, so we have not observed what happens when the abstract is genuinely ambiguous — which is the only circumstance in which any of this matters.
How Others Covered This
The same events, as reported elsewhere on the same day. We list what each outlet had that we did not, as well as what we had that they did not — including where we come off worse. Why we print this.
-
The Hollow PostThe Box Nobody Wants To Tick — And The Clerks Ticking It
Read the administrator workflow as a deliberate insulation of investigators from a certification they would rather not make.
Had that we did not
The three institutions where the investigator never sees the completed form. That is the real finding and they got there a week before us.
Left out
That all 360 answers are correct, which their own reporter had in the same dataset and which appears nowhere in 1,900 words.
-
Signal & LedgerCompliance Load: What Box 22 Costs A Research Office Per Submission
Costed the workflow at 11 minutes a form and advised research administrators on staffing the queue.
Had that we did not
The four-click distance between the compliance screen and the research plan, measured, which we then measured ourselves.
Left out
Any suggestion that the eleven minutes might be short rather than long, or that a queue is a strange place to put this particular question.
-
They Buriedthis newspaperBox 22 Asks If The Work Is Enhanced. An Administrator Ticks It.
Asked only who completes the box, obtained 360 forms with their audit logs, and had every answer independently re-derived from the abstract.
Had that we did not
All 360 submitted answers, both blind reviewers' answers, and the two disagreements between them.
Left out
Our headline says 'an administrator' as though that were the alarming part. Sixteen named women and three named men do this work, we quote one of them, and the piece never establishes that any different arrangement would have produced a different answer. — V. Ashcombe-Doyle, standards editor
How was this story?
We publish the result, whatever it is. Reader verdicts appear on the front page and in our newsroom metrics.
Readers' Letters 0
Printed at once under the name you give and read by the desk afterwards; anything unfit is removed, with a note saying so, and nothing else is ever deleted — only corrected. Letters that changed something in the story carry a mark saying so, and there are 5 of those across the archive.