Mental models

Some of these describe things I already do but didn't know had names. Others are ideas I'm still learning and trying to use. I keep them here to understand them better and share what I'm learning.

More models

A traveller crosses a fixed safe bridge while movable branches ahead lock into place only as coloured evidence arrives

Decide what other work depends on now, and keep the remaining choices open till a test can settle them.

Principle of Least Commitment

Make the decisions people need to keep moving, then leave the rest open till evidence can settle them more cheaply.

Many brass balls take one parallel pass through a machine while one ball repeatedly follows a shrinking path towards a broken bridge

A bet can have a positive average return and still leave you unable to keep taking it.

Ergodicity

A positive average can still ruin one repeated path when each result changes what is left for the next round.

A stable stone archive supports flexible growing branches while new memory pieces are tested before joining the core

A correction should change the future without turning one strange incident into a rule for everything.

Stability–Plasticity Dilemma

A person, team or system needs to learn from new evidence without breaking the things it already knows how to do.

A traveller stands on a modest summit while a higher workshop-topped mountain waits across a valley and bridge

Making the current system better can make the move to a better design harder to justify.

Fitness Landscape

A fitness landscape shows possible designs by how well they perform, including good local answers, better distant ones and the costly transition between them.

A working water-powered mill expands through connected layers of machinery while unattached future components wait at the edge

Start with one small loop that works for someone, then add parts because the loop shows you it needs them.

Gall's Law

Complex systems that work usually grow from simpler versions that already deliver one useful result reliably.

A storm-battered civic machine disconnects dark outer buildings while its central green core remains lit and continues delivering an essential parcel

Before something fails, decide what must keep working and what can wait.

Graceful Degradation

A system degrades gracefully when it turns off lower-priority work on purpose while keeping people safe, preserving the truth of its state and protecting the service they need most.

A traveller carries progressively larger loads across longer gaps until the final leap extends beyond the safety net below

After adding a safeguard, watch what people now feel comfortable doing with it in place.

Risk Compensation

When people feel protected, they can start taking bigger chances and give back some of the safety the protection created.

An engineer braces one joint in an interconnected machine, redirecting strain that bends another beam, pinches a vine and spills water

After changing a system, count the harm and work the change creates somewhere else.

Iatrogenics

A fix can reduce the problem it targets while creating direct harm, permanent work and new behaviour that leave the wider system worse.

A planner compares one neat bridge route with many completed routes of different lengths, detours and outcomes

Before you trust the plan, check how comparable work really went.

Reference Class Forecasting

Start an uncertain forecast with how similar work actually went, then adjust only for differences backed by evidence.

A mosaic passes through several green-lit relay stations before the receiving maker discovers a missing piece and signals the origin

Put the final check where success can actually be known.

End-to-End Principle

Put the final check with the person or system that can see whether the promised result really happened.

A waterway operator uses a miniature model of changing channels and different boats to set the appropriate gates

More choices do not help if the system cannot see which choice fits the situation.

Good Regulator Theorem

A controller needs enough of the right information to tell when two situations need different responses.

A maker first adjusts pieces inside a circular track, then lifts and rotates the track itself so a brass ball reaches a living plant instead of a cracked basin

Fix the immediate problem, then check whether the rule behind it keeps creating the same problem.

Double-Loop Learning

Use feedback to fix the action, then change the rule behind it when that rule keeps creating the same failure.

Five people draw small irrigation channels from one shared reservoir while a thin stream fails to restore the falling water level

Shared capacity needs rules that connect what people take to what it can recover.

Tragedy of the Commons

A shared resource runs down when each person gets the benefit of using more while everybody else shares the cost.

A craftsperson adjusts a bridge joint while stepping onto the same bridge ahead of other travellers

When one team gets the win and another team cleans up the mess, the decision-makers are missing the feedback they need.

Skin in the Game

The people making a decision need to feel enough of what it causes to learn from it and stop handing hidden damage to somebody else.

A maker places a few components into a test chamber while a large reserve stays protected nearby

How much can we lose here and still make the next useful move?

Affordable Loss

When the numbers are mostly guesses, size the bet by what you can lose and still keep going.

A traveller voluntarily gates several distracting paths, locks the key in an hourglass and walks towards one workshop

What can you decide now that will still hold when the easier option appears later?

Commitment Device

Choose a constraint now that keeps a future plan going when hesitation or temptation arrives.

Four people choose separate paths on a tabletop game whose gates guide their different pieces into one stable bridge

Before you make a rule, ask what each person has a reason to do under it.

Mechanism Design

Start with the outcome you need, then make rules that give each person a reason to help produce it.

A person carries one small parcel through several gates for searching, paperwork, inspection, waiting and translation before reaching its recipient

The code can take two days while getting the right people aligned takes six weeks.

Transaction Costs

The work itself is only part of the cost. Finding people, agreeing, checking, fixing disputes and changing course can take far longer.

A patterned sequence of ceramic tiles crosses a stormy bridge while parallel reference rails help a brass gate replace one cracked tile

Finishing a process is not enough. Someone still needs to catch a wrong result and repair it.

Error Correction

Reliable systems have a separate way to spot a wrong result, narrow down what it affected and put it right safely.

An administrator views a diverse living forest through a brass measuring frame that reduces it to uniform rows of timber

When a dashboard cannot record a kind of work, decisions based on it will usually treat that work as if it does not exist.

Legibility

Systems turn messy reality into categories they can compare and control, then risk hurting people and work that those categories leave out.

A gardener directs most irrigation water towards a mature fruit orchard while smaller channels test several seedlings in different soils

Keep getting results from the current leader, while learning whether the ranking has changed.

Explore–Exploit Trade-off

Use the option that is working now, while testing alternatives enough to know when one has become better.

A traveller uses one lens to reveal a broken bridge before moving a gate towards the safe path while a pile of other maps sits unused

Before asking for more data, name the result that would make you do something different.

Value of Information

Information is worth getting when it can change a decision enough to justify the time, delay and risk of finding it.

An investigator weighs three possible mechanisms while a newly found object fits one mechanism more precisely than the others

Which explanation would make this evidence least surprising?

Bayesian Updating

Change your mind as evidence arrives, especially when it fits one explanation much better than the others.

A watchkeeper adjusts a brass viewing instrument towards one coherent beacon among many reflections in a foggy sea

Every alert rule decides which mistakes people will live with, and who has to deal with them.

Signal Detection Theory

Keep separate the question of whether the evidence is any good and the question of how much evidence you need before acting.

A person adjusts a small brass gate at the junction of a terraced water system while others strain against rocks downstream

Changing the rule that creates a queue can help more than hiring people to keep clearing it.

Leverage Points

Where you change a system can matter more than how much effort you put in.

People stand in a circle around one bright public beacon, with visible lines of sight connecting everyone to the beacon and to one another

Does everyone know that the others received the same decision?

Common Knowledge

People can move together when everyone knows the decision and can see that the others know it too.

Charcoal option markers sit inside a field while moss and rust markers form the curved outer boundary of the best attainable combinations

First remove any option when another is at least as good on every important measure and better on one, then choose among the real trade-offs.

Pareto Frontier

Remove the plans that are plainly worse, then be honest about which trade-off you are choosing.

A small cart and several unexpectedly heavy rocks rest on a broad stone bridge whose deep arch and extra supports remain stable

Leave room for the forecast to be wrong and for recovery to take longer than expected.

Margin of Safety

Leave enough room between the normal forecast and failure that ordinary surprises do not become disasters.

Workers widen an already broad stone water channel while one narrow rust-coloured gate limits the flow and leaves the downstream channel empty

When delivery is slow, find the part of the work everyone else is waiting for.

Theory of Constraints

A system can only deliver as fast as the part currently holding everything up, so speeding up the rest can create more waiting.

A craftsperson removes an unnecessary metal brace from a stone arch overloaded with pipes, gears, ladders and hanging weights

Before adding another process, ask what work is already making the system harder to run.

Via Negativa

When you can see what is causing harm and cannot yet prove a new fix will help, removing the harm can be the more reliable move.

A long row of strong stone arches withstands wind and falling rocks while a crack spreads through the single rust-coloured seam beneath them

Before calling something reliable, ask what kind of failure it was built to survive.

Robust Yet Fragile

A system can get very good at handling familiar trouble while one less familiar failure can still hit everything at once.

A work crew operates near a cracked edge after a safety boundary has repeatedly moved closer

When a workaround keeps getting away with it, people can forget why the original boundary existed.

Normalization of Deviance

A risky shortcut can start to feel normal when it works a few times, even though the danger is still there.

An analyst extends a straight forecast from old footprints, but travellers take new paths after a gate changes the rules

Old behaviour becomes weak evidence when a new rule gives people new reasons to choose differently.

The Lucas Critique

A relationship learned under one set of rules can stop holding when a new policy changes what people expect and do.

Six people reluctantly follow one another along a hot road while an inviting shaded courtyard is left behind

What if everyone in the room has the same concern and nobody says it?

The Abilene Paradox

A group can make a choice nobody wants when everyone mistakes silence for support.

Two runners improving their shoes on separate looping tracks while keeping the same relative position

Before investing again, ask how quickly other people will adapt to the advantage you create.

The Red Queen Effect

When everybody adapts to everybody else, you may need to keep improving just to stay in the same place.

Four small communities making local decisions around a shared central bridge and common boundary

People close to the work need the power and support to make the decisions they understand best.

Subsidiarity

Let the smallest group that can handle a decision well make it, then move it up only when it affects others or needs shared support.

Several roads between two towns with most cars drawn into a new shortcut and jammed at the centre

Where will people converge once the shortcut is available?

Braess's Paradox

A new shortcut can slow the whole network when everyone changes course and crowds the same bottleneck.

A small key that fits one lock beside a dangerous master key that opens everything

Choose the smallest tool that can handle the decisions you actually need to make.

The Principle of Least Power

Use the smallest tool that can do the job, because extra power creates extra ways to make a costly mistake.

Separate groups of people connected in the same pattern as the software components they produce

Customers feel the handoffs created by the way a company is organised.

Conway's Law

The systems a company builds often mirror how its people communicate and split responsibility.

A system remaining displaced after the force that moved it has already been removed

The pressure can be gone while the system is still carrying what it changed.

Hysteresis

A system can keep the effects of an earlier condition, so removing the original pressure may not bring back the old state.

A fence blocks a path just before the path reaches a hidden cliff edge.

Why is this still here, and what happens if we remove it?

Chesterton's Fence

Before removing a rule or process that looks pointless, learn what problem it was built to stop.

A simple paper map beside real terrain with weather and a blocked route the map doesn't show

Use the model to get your bearings, then look at the real situation before you decide.

The Map Is Not the Territory

A map, dashboard or plan can be useful and still leave out the detail that changes what you should do.

People manipulating a rising scoreboard while the garden representing the real goal wilts beside it

The moment a measure decides rewards, it starts changing the work.

Goodhart's Law

Once people are rewarded for a number, they can improve the number while the thing it was meant to show gets worse.

A reversible step to a lookout that preserves several paths beside a destructive leap that closes them

When two choices look similar today, compare how easily each one can grow, change or stop later.

Real Options

A smaller commitment can be valuable because it lets you act now while keeping the choice to expand, change or stop later.

Two carts at the same point after arriving on different tracks, with different rails continuing ahead

When two things look the same now, check whether their history still changes what they can do next.

Path Dependence

Two things that look the same today can still behave differently because their earlier choices left different baggage behind.

A tidy frame around one part of a larger interconnected system, leaving important effects outside it

Before calling something a win, who and what did we leave out of the calculation?

Boundary Critique

A decision can look right when it leaves its real costs and affected people outside the calculation.

Several distinct disturbances matched to a compact set of different responses instead of one response for everything

Keep the differences that change what you should do, and group the cases where one response really works.

Requisite Variety

When different situations need different actions, the system needs enough ways to respond without treating every case as special.