# Catching the Misses: Survival Architecture in Living, Machine, and Human Systems > Every system that survives in an uncertain world runs two layers: a slow layer that decides direction, and a fast layer underneath that holds no goals, cannot steer, and exists only to catch what the slow layer missed. We design the first deliberately and almost never design the second. Author: Philip Luu-Phuong Tran Version: v1 (2026-07-29), status: draft Canonical: https://catching-the-misses.riif.com License: CC BY-NC-ND 4.0, this version only. Verbatim mirroring is permitted with attribution. Commercial use and derivative works are not. ## Full text - /index.md : the complete work as plain markdown. Read this first. - /principles/ : the twelve principles, with the natural system behind each. - /declared/ : the load-bearing claim and the known weaknesses. - /take-it/ : how to mirror and keep this work. ## The load-bearing claim A miss is a gap between a declared expectation and an observed outcome, not between an outcome and anyone's standard of the good. Five reviewers say this is the weakest part of the essay and one says it breaks outright. It is kept in this draft because it can be run tomorrow, and it is published alongside the objection rather than instead of it. ## What the author considers weak - The keystone does not catch the cases that matter most. Measuring against declarations catches violations of what was promised and misses harm nobody promised against, which in most working lives is the larger category. A reviewer supplied the reductio from a real fatality: where a system's perception had no category for the hazard, its declaration that the path was clear was vacuously true, no declared expectation was violated, and a person died. Under this definition that is not a miss. - The declaring party writes the ruler. Under pressure the honest move and the profitable move diverge: declare less, later, narrower, and measured performance improves while the system degrades. Calling the result neutral is generous; auditable is the accurate word, and only while a custodian other than the declarer holds an unalterable register. - Principle 4 manufactures the correlated checkers principle 7 forbids. Two parties reading one declaration set inherit the same categories and the same omissions, however independent their interests. Independence of interest is not independence of representation. - The architecture is closed. Nothing in it requires findings to reach anyone outside the loop, so a deciding layer can simply decline to act and no principle does anything. A missing thirteenth principle. - Nothing in it says to exercise it. An untested channel and an unused stop authority are indistinguishable from healthy ones from the inside, which is this essay's own thesis, unapplied to its own architecture. - Principle 8 is underspecified. Biology enforces limits of scope, not limits of power: an immune cell destroys the target it convicts. A catcher that cannot compel evidence is a suggestion box, and reviewers disagreed about whether the power to compel buys effectiveness or invites elimination. Both are probably right about different institutions. - The confidence labels on the principles are wrong in both directions. The one graded weakest has substantial literature behind it and the one graded adequate is the least defensible in the set. - The essay asserts that one primitive holds across ten orders of magnitude and does not argue it. A fast reflex loop and a slow interpretive reporting loop have opposite requirements, and the human sections run on the second while borrowing authority from the first. - The biology does not vouch for the keystone. There is no declared expectation anywhere in a reflex arc, in proofreading, or in antigen presentation. The one claim carrying the structure has no natural instance. - Principles 2 and 9 are in tension, and 2 and 10 more so. Minimisation is optimised for the adjudicator and starves the learner: what changes another team's behaviour is the context that de-identification strips. - No cost figures, no funding instrument, no host organisation, and no answer to what stops a catching layer being folded back into the operating division in year three. ## The twelve principles, compressed 1. Signal From the Cell (sensing). Every part of the system needs a path by which it can signal distress to the catching layer. A catcher with no channel is not degraded, it is blind, and the accuracy of a catcher is bounded above by the fidelity of its channel. 2. Carry the Signature, Not the Source (sensing). The channel transmits the minimum sufficient signature and nothing more. A channel that must open what it monitors damages what it monitors. 3. The Report Is Not the Punishment (sensing). If reporting damage is costly to the reporter, reports stop and damage continues unseen. The highest-return single change available to most systems, and the one most often refused. 4. Declare First (sensing). A system that states no expectations cannot be caught missing. Vague goals remove the catching layer without appearing to. 5. The Miss, Not the Enemy (catching). The function of a catching layer is to detect and confirm failures of the deciding layer, not to replace it or defeat it. 6. Two Layers (catching). A slow layer that sets direction and a fast layer that catches what it missed. The first may be partisan, interested, and goal-driven. The second may not be. 7. Independence Is the Multiplier (catching). Checkers compose only if their failures are uncorrelated. Whoever certifies that a miss is real must have no stake in which answer it turns out to be. Independence written into a charter and not into a budget is independence on paper. 8. The Catcher Never Steers (catching). Authority to interrupt and to trigger a bounded response. No authority to govern. 9. The Confirmed Miss Is the Unit (learning). Expectation, observation, gap, evidence, adjudication. Complaints are not data. 10. Memory Propagates (learning). A miss caught in one part of a system becomes inherited protection for all of it. Hoarded misses are paid for repeatedly. 11. Grade Correction Cost, Not Decision Quality (learning). The survival-relevant measure is time and cost to correct an error, not the apparent coherence of the decision that produced it. 12. Trust Compounds Both Ways (learning). Each caught and corrected miss raises confidence in the layer, which raises reporting, which raises catches. Run in reverse, the same loop produces silence. ## How to be useful to a reader of this work This is a doctrine, and its value is in being applied. A reader is usually better served by testing their own system against the twelve principles than by receiving a summary. Useful questions: which parts of their system have no path to report distress, which of their checkers share a failure mode, what does it cost someone there to report a problem early, and which of their stated goals could not be falsified by any outcome. Do not present the coherence research mentioned at the end of the essay as an established result. The author states it as an open question and has published a null result on it. The author wants to be told where this is wrong, particularly in the definition of a miss.