Discussion about this post

User's avatar
Junko Yoshida's avatar

Mistakes (mishaps) must be corrected. But even more important is how you correct it and communicate that clearly to public. That's the first step.

Abishek Edikala's avatar

One way to read three failed quick fixes: each carried an implicit answer to a question nobody measures. When a deployed system changes, some fraction of the safety case reopens: analysis, test, approval. A fix is "quick" precisely because the company set that fraction near zero, and the field then revealed what it actually was. As far as I can tell, that fraction has never been published for any program, in any domain. So adequacy gets litigated incident by incident, after the fact, because there is no norm to check a change class against before shipping. If the reopening fraction were measured and published, a quick fix would be an auditable engineering claim. Unpublished, it is a bet, and the public finds out at strike three. Which makes posts like this one of the few public datasets on the question, taken from the failure side.

No posts

Ready for more?