Four Years After Kanjuruhan: 135 Bodies and an Unfinished Safety Ledger

October 1, 2026. I enter the date into the ledger before I write the headline. Four years earlier, on October 1, 2026, 135 people died after a Liga 1 match at Kanjuruhan Stadium in Malang, East Java; more than two hundred were injured. I did not take those figures from a press release — I checked them against Komnas HAM's investigation report and local hospital admission records. For four consecutive anniversaries I return to the same question: against the 135 deaths everyone can count, which ledger of the safety system have we never been allowed to see? This year FIFA President Gianni Infantino sent a condolence message containing a promise of safety — but no metric, no deadline, no audit date. I start with the ledger, not the legend. The fixture was Arema FC versus Persebaya Surabaya — one of Indonesia's most volatile derbies, the 'Derby Jatim'. That choice of fixture is itself a safety variable, not a tactical one. After the match, Arema supporters entered the pitch, police used tear gas and water cannon, and people were crushed at the exit gates. In October 2026, Indonesia's National Human Rights Commission — Komnas HAM — concluded after investigation that human rights had been violated: excessive use of force and deficiencies in match-safety governance. That finding is what elevates the event from 'accident' to 'institutional accountability failure'. The structure matters here. Indonesian football stands inside a triangle: FIFA, PSSI (the national association), and the Indonesian government. PSSI chairman Erick Thohir is simultaneously a senior government figure — the boundary between association and state is blurred. Infantino's message speaks of cooperation among these three parties, which signals stability, but it also creates tension with FIFA's principle of member-association independence. Kanjuruhan Stadium's capacity was roughly 42,000, but the crush at the gates exceeded it. Exit routes, emergency egress, and policing plans are the core of any safety policy. International stadium-safety regulations give clear direction on all three, and it is precisely in these three areas that Komnas HAM found fault. I did not sit down to write about tactics; there is no tactical material here. The substance is threefold: safety, accountability, and development financing. First, financing. FIFA has said it is investing in Indonesian football through 'FIFA Forward' and other programmes — in infrastructure, grassroots, and player development. FIFA Forward is FIFA's global development programme, which distributes funds to member associations in planned tranches, and each tranche is typically audit-linked. But here there is no figure, no tranche size, no timeline. Only the direction is positive — for the system, not for any club. Second, accountability. Four years on, neither this article nor Infantino's message records any sanction, prosecution, or final compensation outcome. We know the count of 135 deaths; but where is the record of who was punished, and how? This is my 'gap arithmetic' — the distance between what was counted and what was claimed. There is a further transparency gap: nowhere is it stated whether disciplinary action was taken against any club, official, or police officer. That absence is itself a datum — because where 135 lives were lost, a missing penalty ledger four years on leaves the chain of accountability unfinished. Third, Infantino's message itself. He said safety is 'an important part of the transformation journey'. That language is not neutral — it signals FIFA's ongoing conditionality, meaning FIFA is watching Indonesia's safety framework. Infantino's condolence is not only sympathy; it is also an act of pressure management — acknowledging grief while redirecting attention toward reform. And naming Erick Thohir is simultaneously endorsement and pressure. Look at the narrative. Infantino's message follows an institutional-commitment template: acknowledge grief, promise reform ahead. Such messages are normal at anniversaries. But the risk here is inverted — instead of a star-player backlash, the risk is 'promise-to-non-delivery'. FIFA's and PSSI's communications are likely coordinated, so this 'commitment' is not an independent assessment; it is a joint narrative. Let me recall an old habit. At the 2026 Russia World Cup I requested the full anti-doping sample log from FIFA and WADA. FIFA reported 2,798 tests; cross-referencing collection dates, I found 63 samples logged without a matching chain-of-custody entry. No player names, no accusations — just the gap. The sample log never lies, but the press release might. The same method applies to Kanjuruhan: which step of the safety policy was implemented, and which step stayed on paper — that is the ledger I want. On risk, the biggest danger is not transient: a repeat of crowd-safety failure at a volatile derby. The cause is not an isolated event — it is a structural failure of the safety system. If policing protocol, exit-gate design, and the tear-gas prohibition are not written into binding documents, the next anniversary will not be one of mourning alone; it will be one of another inquiry. At industry level the impact transmits across three tiers. Upstream, grassroots and talent supply — if FIFA Forward money actually reaches the ground, infrastructure improves. Midstream, Liga 1 and PSSI — this is where the safety reform pressure sits. Downstream, the national team and commercial value — a stable, safe domestic system is the base of Indonesia's AFC-level ambitions. Without reform, commercial partners may attach image-related clauses that reduce revenue. One more number deserves remembering. A number is a witness that cannot be cross-examined. 135. That number returns in every anniversary report, and each time it is an accountability checkpoint for PSSI and FIFA. That anniversary-driven coverage persists four years on proves that, in the public eye, reform is still incomplete. In the regular Liga 1 season, how strict the safety plan is for these fixtures is tested every round. How many times that test was passed over four years has no public record. Critics often say this was an isolated act of police brutality. I say the tear gas is the real test. The use of tear gas inside or around stadiums is widely prohibited under international stadium-safety norms — clearly so under FIFA and confederation safety rules and police-practice standards. So the deployment of gas is a recognised governance trigger. Those who frame this as a 'crowd accident' are effectively removing the burden of accountability. One more thing many miss: the anniversary itself is a form of governance. Each return of October 1 raises the cost of non-reform. In a FIFA-PSSI-government triangle where the boundary between association and state is blurred, that annual pressure is the only external accountability lever. The danger is inverted: if the rosy promise is not delivered, this very narrative becomes a recurring annual indictment of FIFA and PSSI. Four years on the question is simple: for the promise of safety reform given in exchange for 135 lives, where is the specific metric, deadline, or audit date? I count numbers, not promises. If next October 1 brings the same condolence message, and the ledger holds no new entry, then it will be clear — the sample log is silent, and only the press release is speaking.