The Tokyo Protocol

Risk Pattern Library 31

Thirty-one ways a room sold as private can fail to be private — a register for advance work.
Edition 2026 Q3 · English
Unrestricted distribution
Failure modes, not incident reports
Venue names intentionally omitted
Reviewed quarterly
The cost of one exposure

A privacy failure in a Tokyo private room is not, in this trade, a service complaint.

What is at stake is not the dinner. Depending on the mandate it can include the remaining value of the contract, the referral chain that produced the principal, and an incident the principal can name. Only your own firm can put a figure on that against one evening's booking. This register does not put one on it.

Thirty-one distinct failure modes are catalogued below — thirty-one ways a room sold as a “private room” can fail to be one. They are listed so that your advance team can rule them out before the reservation, not after the photograph.

Risk Register

31 failure modes · 4 categories

01  Partition Pretenders — visual shield only · 10

  1. P-01Roll-curtain / fabric partitions marketed as “private rooms” (no acoustic isolation)
  2. P-02Semi-private booths with open tops (sound and smoke travel over the partition)
  3. P-03Glass partitions that preserve visibility or silhouettes under certain lighting
  4. P-04Low partitions where standing guests or staff regain full line-of-sight
  5. P-05Decorative slats / lattice walls that create angle-based viewing vectors
  6. P-06Box-seat types that block sight but fail on acoustic isolation
  7. P-07Movable walls that leave edge gaps (sound leakage)
  8. P-08Visually open entry zones where corridor traffic is observable from inside
  9. P-09“Semi-private” labelled rooms treated as private in the booking flow (mislabelling risk)
  10. P-10Allocation changed by occupancy on the night (the room booked is not the room used)

02  Structural Leakage Paths — not physically sealed · 9

  1. P-11Walls stop at ceiling tiles, not slab-to-slab, creating a plenum leakage path
  2. P-12Shared ceiling voids (plenum) carry voices between rooms
  3. P-13Vent and duct paths transmit conversation across rooms
  4. P-14Door and frame gaps that leak sound consistently
  5. P-15Poor absorption materials; echo-prone layouts amplify voices
  6. P-16High ceilings without effective absorption (reverberation)
  7. P-17Service routes pass directly in front of doors (exposure during entry and exit)
  8. P-18Multiple openings or steps create accidental sightlines (corridor, garden)
  9. P-19Insufficient separation between adjacent rooms (direct conversation transmission)

03  Traditional Vulnerability — sound / silhouette · 6

  1. P-20Shoji / fusuma paper screens where silhouettes may be visible
  2. P-21Thin wooden walls: neighbouring conversation is audible, and is not always regarded as a defect
  3. P-22Heritage-house structures with corridor and foot-traffic noise transmission
  4. P-23Sliding-door frames with consistent perimeter gaps (sound leakage)
  5. P-24Layouts not designed for silence; close table spacing increases leakage
  6. P-25Aesthetic-first designs with weak soundproofing and absorption

04  Operational Hazards — relocation / mixed flows / shared restrooms · 6

  1. P-26Footwear removal zones that create encounter exposure at the entrance
  2. P-27Long queues and waiting areas that make VIP logistics impossible
  3. P-28Relocation for dessert or tea (the private setting ends part-way through the meal)
  4. P-29Shared public restrooms outside the venue (critical failure)
  5. P-30Staff enter without knocking; repeated interruptions (protocol failure)
  6. P-31Doors kept open during service and clearing (corridor exposure)

Seven questions that decide the room

Q1Do the walls of the room reach the concrete slab, or stop at the ceiling tiles?
Q2Is the restroom inside the room, or shared with the public floor?
Q3Is there an entrance and a service route that do not cross the main floor?
Q4Will dessert and tea be served in the room, with no relocation?
Q5Is “knock and wait for a reply” written into the service order for this booking?
Q6Is the room contractually guaranteed, or reassigned by occupancy on the night?
Q7Is the room classified internally as “private” or as “semi-private”?
Few venues publish answers to these. Each has to be established from the record where the record settles it, or observed in the room — and a verbal assurance is neither.

Method — two layers, always labelled

Desk layer — open sourceStructural inference from published plans, imagery, filings and operating records. Indicative. Not physically confirmed.
Observed layer — in the roomWhat the assessor could see and hear from the seat, on the evening of the assessment. No instruments, no access above the ceiling, nothing outside the guest area.
Every assessment we issue carries one of these two labels, item by item. We do not present the first as the second: a ceiling void is not ordinarily established from open sources, and what we could not establish is named as unestablished rather than left to read as clearance. Where a venue has itself published a drawing or a dated photograph that settles it, that is an open source like any other, and the finding says so.
This register is free. It is also not sufficient.

Thirty-one patterns tell your advance team what to look for. They do not tell you which of the thirty-one apply to the four rooms on Thursday’s shortlist. That turns on published floor plans, building and fire filings, imagery and the venue’s own operating record — read in Japanese, from Tokyo. Where the published record cannot settle a question, we say which question it is, and what to require instead.

Venue Screening

your candidate rooms, read against this register

You tell us which rooms; findings come back keyed to your own codes (A01, A02…), so the document you circulate carries no venue names. We necessarily know which venues they are — the work is reading their published record — and we do not publish those names or disclose them to any other client. For each code we return the patterns this register indicates, the source for each, the operational requirements to place on the booking, and what the record cannot settle, on the turnaround set out in the engagement terms.

We do not return a score, a ranking, a recommendation or a clearance, and we do not warrant the state of a room on the night.

Hideyuki Ura · [email protected]
N&E BLD. 6F, 1-12-4 Ginza, Chuo-ku, Tokyo 104-0061, Japan. Written correspondence only. Engagement terms on request. Sole proprietorship; no incorporated entity. No clients to date.