"3-cycle coding: first-cycle → pattern → cross-case matrix"
The three cycles are:
First-cycle: Read each document; code text segments describing governance practices, formal controls, or incident outcomes. Segments could receive multiple codes.
Second-cycle (pattern): Group first-cycle codes into higher-order patterns directly tied to each RQ.
Third-cycle (cross-case matrix): Produce the comparative matrix in Chapter 5 — the evidence backbone for your findings.
The codebook in Appendix B documents every code definition.
"4 quality controls: construct, internal, external validity + reliability"
Construct validity
Pre-defined conceptual framework from Chapter 3 guided data extraction consistently throughout — no post-hoc code invention
Internal validity
Cross-case pattern matching: a pattern appearing consistently across all three cities despite radical contextual differences is evidence of a genuine governance mechanism, not coincidence
External validity
MDSD case selection — if the mechanism holds across maximally different systems, it transfers
Reliability
Documented coding protocol + explicit Appendix B codebook definitions + transparent 18-document audit trail