Kanjuruhan 135: The Ledger That Has Not Closed After Four Years

I have an entry in my Khulna ledger dated 1 October 2026, and its final cell is still empty. That night I was on remote data duty. The screen carried a match from East Java, Indonesia, and my notebook filled row by row from kick-off to added time. What I logged after the ninetieth minute was not an xG table. It was the use of tear gas inside a stadium, then the crush of a crowd at a narrow exit, then 135 names. Forty-three were under eighteen; the youngest was three years and ten months old. I opened the Khulna xG Ledger and the numbers began to breathe. This time the word breathe was not a metaphor. This is not a match report, and it is not a transfer analysis. For three decades I have reconstructed matches as numbers — passes, presses, shot maps, PPDA. Kanjuruhan is not the kind of event that xG can explain. So I changed the framework: in place of tactics, transfers and finance I set governance, safety compliance, public opinion and systemic risk. Where information was missing I did not write a guess; I wrote “insufficient data”. The transfer market is a ledger of intentions, and I only trust the settled entries; not one entry in this event has settled. The scale needs stating. On 1 October 2026, after a match at Kanjuruhan Stadium in East Java, spectators entered the pitch. To regain control, security personnel fired tear gas inside the stadium. In the smoke and panic, spectators ran for the exits; 135 people died of trampling and asphyxiation at a narrow exit route. Among the dead were two on-duty police officers — the failure did not only strike the crowd, it broke the safety structure from within. In 2026 I audited 306 matches played in empty stadiums, and that is where I learned: stadium safety is an engineering question, not an emotional one. Where the width of the exit route, the density of the crowd and the use of a chemical agent were never calculated together, attendance — however passionate — is no guarantee of safety. I keep one rule: before writing I fix a stopping rule — one primary metric, two supporting indicators. Here the primary metric is the death toll and its age distribution; the supporting indicators are the nature of the exit and the state of accountability. Without a stopping rule set in advance, ledger paralysis sets in — I hoard every table and lose the story. And the centre of this story is people, not numbers. I laid the event out as a ledger — nineteen information points, each with a confidence tag. High-confidence: the death toll of 135; 43 minors among the dead; tear gas fired and trampling at a narrow exit. Medium-confidence: the local derby context and the venue identity, which the source text does not state directly. Low-confidence: the size of the financial loss, because no figure is given anywhere. The timeline is the real data. Belgium-Japan taught me that a PPDA collapse is a story told in five-minute chapters. At Kanjuruhan the phase change is crueller. Phase one: the match ends, the stands spill onto the pitch. Phase two: facing an uncontrolled crowd, the security force decides to fire a chemical agent inside the stadium. Phase three: smoke, breathlessness, zero visibility, and a shove-and-push toward a single narrow route. Phase four: death by asphyxiation and trampling. Each phase is the consequence of the last; nothing here was accidental, a chain broke. The numbers, because without numbers memory blurs. 135 dead. 43 under eighteen. The youngest victim was three years and ten months old. Children came to watch a game, and among them was a child who had not yet learned to count. I do not worship models; I reconcile them with the muddy receipts of the season. Here the receipt is clear: deaths of children in what should be a child-safe environment mean the safety design failed its test. On governance I am cautious but plain. FIFA and equivalent stadium safety regulations generally prohibit the use of tear gas or chemical agents inside stadiums — a widely recognised principle, though the specific regulation text should be verified. If so, Kanjuruhan is not merely an operational failure but a possible regulatory breach. More important: four years on, the victims' families are still demanding justice. In my ledger that is the heaviest entry — it means stakeholders judge the accountability process unfinished. On accountability I carry a warning. I am not delivering a verdict against any party; my work is to arrange evidence, not to judge. But the available information says the families' demand is unmet after four years. That unfinished state is itself a data point: had the process concluded, the intensity of annual protest should have fallen. Intensity that does not fall means the work of rebuilding trust remains. International reaction came on two different levels. One institutional: FIFA flew its flag at half-mast at its headquarters, and a minute of silence was observed at the AFF Cup — the event entered world football's institutional memory. The other at supporter level: banners went up in the Bayern Munich stands directly questioning the role of the police; in Indonesia the stands carried banners reading “They Didn't Die, They Were Killed” and “Investigate Kanjuruhan Thoroughly”, with “Salam Satu Jiwa” sung as the anthem. The two levels do not say the same thing — one is diplomatic, the other accusatory. There is news of venue renovation, but it is not confirmed that the safety engineering changed. My experience says the two main drivers of stadium-disaster recurrence are exit design and crowd-control doctrine. Paint and seating do not lower risk if the width of the exit route and the doctrine on chemical agents stay the same. Across the history of stadium disasters the causes of recurrence are almost identical: too few exits, aggressive control tools, and a plan that stays on paper and not on the ground. Kanjuruhan is one of the heaviest lines on that list, because the cause of death was not natural but decision-driven. In natural disasters we fight with engineering; in decision-driven disasters we must fight with governance. My twelve-point checklist is normally written for match reports; here its first six items do not apply, because there is no result or performance data. The remaining six — venue engineering, crowd-control doctrine, medical readiness, chain of command, communication systems, and the path to accountability — each raise a question at Kanjuruhan. The difference between a sporting failure and a governance failure is time: a team's failure is fixed the following week, a governance failure is carried for generations. Kanjuruhan is the second kind of event. Every report I write carries a section: “What this data cannot say”. Here that section is unusually long. A ledger can hold crowd density, exit width, the timeline. A ledger cannot say why a particular decision was taken at that moment, who gave the order, and who did not follow it. That gap is the centre of the case — and it is where I refuse to write a guess. To me the event resembles a distributed ledger, where each year adds a new block — 1 October — and each block repeats the same data: 135, 43, three years and ten months. No central authority can alter this ledger, because copies are scattered across supporters' banners, songs, the streets outside the stadium, and stands around the world. The half-mast flag at FIFA headquarters is one node of that ledger; the Bayern banner is another. That distribution makes the memory indelible, and at the same time keeps relentless pressure on institutional accountability. I also read the event as a transmission path. Upstream lay supporter culture and matchday safety; midstream the clubs, the league, the federation and the police; downstream it spread into global solidarity and governance debate. On this path there is no money, no transfer — there is policy, trust and accountability. A stadium disaster therefore never remains a single match's event; it becomes a safety benchmark for the industry. In the risk matrix I find three tiers. The top tier: systemic stadium-safety risk, because the proximate cause was asphyxiation and trampling and the proportion of children among the victims was abnormally high. The second: unresolved accountability, which sustains the erosion of institutional trust. The third: reputational risk to national football governance from international scrutiny, which crosses borders. Here I must write something uncomfortable. The easy path to a wrong reading is to find a single cause — “it was all the tear gas”. My ledger does not say that. Tear gas, a narrow exit, inadequate stewarding, crowd-control doctrine, and a chain of command — unless these five aligned, the toll would not have reached 135. In our appetite for a cause we often deny the process; and once the process is denied, correction becomes impossible. The second error is to treat attendance as the culprit. Auditing 306 empty-stadium matches showed me that when spectators leave, the home convenience falls, but discipline does not rise by itself. A crowd is not a disease; a crowd is a condition that engineering and doctrine must be reconciled with. At Kanjuruhan that reconciliation never happened. And the third error: if families still demand justice four years on, it does not mean the system is idle — it means settlement never came, and so the memory hardened. In the coming months I will watch three entries. One, any new judicial or fact-finding decision — it can shift trust. Two, any change in safety rules, especially an explicit ban on chemical agents inside stadiums. Three, the scale and tone of the 1 October commemorations. The ledger's final cell will be filled only when accountability ends — not when memory fades, but when justice is established. I leave the question open: does a stadium become safe by changing its engineering, or by the habit of flying a flag at half-mast?