In a connected city, an identity record may open doors, authorize payment, and prove that someone belongs in a place. That convenience makes exclusion harder to see. A person whose record is missing or wrong may stand in front of a building that is physically open but practically unreachable.
A border without a wall
Picture a resident whose address was entered incorrectly. The transit system refuses a neighborhood pass, a clinic rejects their booking, and the help desk requires the same pass to start an appeal. No guard needs to announce a ban. Several ordinary systems can combine into one. This example is fictional, but it shows why access rules matter as much as architecture.
An identity system can also decide which version of a person is official. A changed name, lost document, or conflicting record may be difficult to explain to an automated process. Good fiction follows the person through the consequences rather than using the error only as a plot trick.
An error needs an exit
Imagine a resident whose account is marked inactive after a name change. The clinic, train gate, and payment desk each reject it, but each sends the resident to a different office. The problem is not merely a faulty database entry. It is a chain of services in which nobody owns the correction. A believable city shows where a person can appeal, how long a temporary pass lasts, and what happens while they wait.
An access rule may protect a shared resource, so removing every check is not automatically the answer. The sharper question is whether the people affected can see the rule, challenge a mistake, and enter by another route when the system fails.