The Saturn V Baseline

As a young lad, beneath the horizontal Saturn V at Kennedy Space Center, staring up into five engine bells.

Most tourists see a museum relic of cold steel. The rocket was a state machine: oxygen manifolds, fuel pumps, wiring harnesses and valve gates timed to the millisecond. A 363-foot rocket is held together by the fidelity of its telemetry. When a pressure transducer drifts by half a percent, the machine is not fluctuating. It is already failing.

Failures never start with an explosion. Ed Pierson, a former senior manager in Boeing's 737 factory, says the standard reassurance is that the planes have flown millions of miles safely, with 98% dispatch reliability. All true, he says, and it means nothing for any individual aircraft: the two Max aircraft that crashed had 100% dispatch reliability on the days they went down (watch the interview). The mechanism is the same everywhere: an anomaly shows up, nothing blows up, and the decision is that it held last time, so it must be safe. In any operation, the same silent drift eats the margin. The official procedure is clunky, so people invent workarounds. Nobody logs them. The workaround becomes the procedure.

Organisations like to think their problems stay behind closed doors. They rarely do. Every organisation broadcasts public telemetry into the open: company filings, insolvency notices, land records, regulatory enforcement logs. Scattered public fragments, once joined up, can overturn an official account. Eliot Higgins, who founded Bellingcat, walks through one case: a defence ministry's satellite photo offered as proof that a hospital was never bombed. In the photo the wall still stood and four poles still cast shadows. The strike had knocked down the wall and two of the poles, so the photo had been taken before the attack (watch the talk).

My mind does not read that data as flat lines. It plots the points in space and connects the unmonitored signals into a diagram. The same habit works on any organisation: line up the scattered signals and look for the pattern nobody owns.

The breach, the fine and the public inquiry arrive late. The unmonitored signals tell the truth first, and the drift can be caught while it is small.

Every workaround goes in the log, not only the failures. Safeguards are proved by triggering them, never by their certificates. Warnings are followed from the day they were issued to the person who acts on them.