The twelve principles

Every part of the system needs a path by which it can signal distress to the catching layer. A catcher with no channel is not degraded, it is blind, and the accuracy of a catcher is bounded above by the fidelity of its channel.

In nature: The afferent nerve. Cut it and an intact reflex arc goes blind. Distressed cells emit damage signals; bacteria run quorum sensing; lymph carries samples to collection points.

Failure mode: No channel and the catcher never fires. Bad channel and it fires on the wrong target. Noisy channel and it fires with nothing there.

well grounded

The channel transmits the minimum sufficient signature and nothing more. A channel that must open what it monitors damages what it monitors.

In nature: MHC antigen presentation. The cell displays short peptide fragments on its surface and is never opened, never copied. Opening every cell to inspect it would kill the cell.

Failure mode: Monitoring that harms its sources loses them, and then it is blind.

well grounded

If reporting damage is costly to the reporter, reports stop and damage continues unseen. The highest-return single change available to most systems, and the one most often refused.

In nature: Nociception. Pain carries no judgment and costs the reporter nothing to send. Neuropathy, leprosy, and congenital insensitivity to pain show what its absence does.

Failure mode: The system does not become undamaged. It becomes unable to see its damage, which is worse.

well grounded

A system that states no expectations cannot be caught missing. Vague goals remove the catching layer without appearing to.

In nature: Homeostatic setpoints as declared operating envelopes.

Failure mode: Vagueness reads as modesty and functions as immunity from correction.

engineering inference

The function of a catching layer is to detect and confirm failures of the deciding layer, not to replace it or defeat it.

In nature: The immune system detects threats and never sets the organism goals.

Failure mode: A catcher that wants to win becomes a rival, and rivals get defunded.

well grounded

A slow layer that sets direction and a fast layer that catches what it missed. The first may be partisan, interested, and goal-driven. The second may not be.

In nature: The spinal reflex arc. Withdrawal completes before conscious pain arrives, and the fast layer has no view on what you were doing.

Failure mode: One layer doing both jobs is one checker in two hats. The reverse also fails: deliberation reaching down into work the fast layer was already handling is why skilled people miss at the moment the stakes rise.

well grounded

Checkers compose only if their failures are uncorrelated. Whoever certifies that a miss is real must have no stake in which answer it turns out to be. Independence written into a charter and not into a budget is independence on paper.

In nature: DNA polymerase proofreading plus mismatch repair. Three mediocre independent checkers take the error rate from roughly one in ten thousand to one in a billion.

Failure mode: Two checkers with correlated failures are approximately one checker.

well grounded

Authority to interrupt and to trigger a bounded response. No authority to govern.

In nature: Autoimmune disease is what a catching layer does once it acquires judgment about its own tissue.

Failure mode: Not inefficiency. The system attacking itself.

well grounded

Expectation, observation, gap, evidence, adjudication. Complaints are not data.

In nature: Antigen specificity as a structured detection object rather than a general alarm.

Failure mode: Unstructured alarm cannot be counted, compared, or learned from.

adequate

A miss caught in one part of a system becomes inherited protection for all of it. Hoarded misses are paid for repeatedly.

In nature: Immune memory, and vaccination as deliberate propagation of it.

Failure mode: Every unit independently rediscovers the same rare hazard, forever.

well grounded

The survival-relevant measure is time and cost to correct an error, not the apparent coherence of the decision that produced it.

In nature: Apoptosis and tissue turnover as continuous low-cost correction.

Failure mode: Systems optimized for decision coherence pay catastrophic correction costs and look excellent right up until they do.

engineering inference

Each caught and corrected miss raises confidence in the layer, which raises reporting, which raises catches. Run in reverse, the same loop produces silence.

In nature: Feedback loop gain. This one still wants a clean biological instance.

Failure mode: Silence reads identically to health from the inside.

engineering inference