The Failure Mode

A recall notice arrives as a single event: a brand, a lot code, a date range, a list of states. Inside the machinery that produces it, the notice is one of the last steps. Before a product can be named in public, several separate systems have to finish running, in order. A person's immune system, a clinical laboratory, a courier, a state public health laboratory, a national genomic database, a round of interviews, and finally a paper trail held by firms with no direct relationship to one another. The Centers for Disease Control and Prevention publishes an illustration of the first half of that sequence. In it, a person eats a contaminated food on Day 1, and the outbreak is identified on Day 23. That interval is not a measure of effort. It is a sum of waiting periods belonging to different institutions, none of them working to a shared deadline. What the First Nine Days Consume In CDC's published timeline, nothing in the first nine days is decided by a food company or by...

On a grid running short of supply, some customers lose power and others do not, and the boundary between them is not drawn where most people assume. It is not drawn by neighborhood, by how much anyone pays, or by who called the utility first. It is drawn by which distribution circuit an address happens to sit on, and by which of two entirely separate mechanisms is doing the shedding at that moment. Those two mechanisms are worth separating carefully, because coverage of any given shortage tends to blur them into one event. One of them is a chain of declarations made by people, ending in a utility opening breakers it selected in advance. The other is a set of relays that watch system frequency and act without asking anyone. They produce a similar outcome — load disconnected — through completely different logic, on completely different timescales, and with completely different rules about who is spared. The directed path runs on definitions The escalation is not improvis...