THE PERMISSION SLIP

The Cell Is Not a Decision

The red-amber-green grid was built to decide who may sign off, not to measure anything. A published theorem shows that a five-by-five can rank a rare catastrophe worse than a tossed coin.

BORN TO ESCALATE

Built as an escalation rule

MIL-STD-882B, 1984: the first explicit severity × probability grid
Each cell prescribed an approval level
A sorting and sign-off tool, never a gauge

The grid sorts hazards for signature and never weighs them. Whoever drew the bins had already fixed the answer.

FIVE BUCKETS

Five buckets, a thousandfold gap

Range compression bites hardest in the tail, and the band where rarity rules out routine is the band where the bins fail.

10⁻³ and 10⁻⁶ annual odds share one 'rare' row
€100M and €10B share one 'catastrophic' column
The scale discards the deciding information

A five-by-five can rank a catastrophe worse than a tossed coin

The reversal strikes where it costs most — Cox, "What's Wrong with Risk Matrices?", Risk Analysis, 2008. The decision that matters lives in the tail the bins erase.

COLOUR VERSUS RULE

A coloured cell points nowhere; a rule points forward

Cell: paints a hazard red, then falls silent
Cell: no owner of the proof, no test for when stopping is allowed
ALARP: reduce until the next control is in gross disproportion
ALARP: the operator carries the burden, Edwards v. National Coal Board, 1949

A demonstration of ALARP is documented reasoning about specific measures and their cost, not a filled-in square.

UNFOLD THE CELL

Unfold the cell into owned barriers

01Map every threat that leads to the top event
02Map every consequence it can spread into
03Set a barrier on each path: preventive left, mitigating right
04Give every barrier an owner and a test date

The bowtie (ICI, 1979; adopted by Shell after Piper Alpha, 1988) turns a red cell into a list of answerable questions, and a barrier left to rot is itself a weak signal worth watching.

ONE LINE INSTEAD

One line replaces the whole grid

Prove the averted loss with a curve, not an anecdote. The cell was never a place. Cost it, and it becomes a price.

Loss exceedance curve: loss against the chance of exceeding it
10% chance of losing more than €2M; 1% chance of more than €20M
Draw the appetite line, then ask if the curve stays beneath it

NAMED, NOT DECIDED

A register names the danger. It cannot decide about it.

Pandemic topped the UK National Risk Register from 2008

The prevention paradox at the scale of a state. The averted disaster never shows up to pay for itself.

THE APPARATUS THAT DECIDES

Keep the triage, replace the verdict

Matrix: cheap triage and sign-off, keep it there
Rare-and-severe: a rule, an owner, a price, a scenario
The cell was the question, not the answer

Each survivor of the critique supplies what the cell lacked: ALARP a rule, the bowtie an owner, the loss curve a price, the premortem a scenario. The corner they govern is not a fixed place. It is a price that moves.

NODE 010 · The Map Redraws ItselfThe Quadrant Is a Price, Not a PlaceThe rare-and-severe corner of the risk map is not fixed territory. It is a line drawn by two prices, attention and process, and AI is collapsing both, squeezing the corner from opposite walls at once.

01 · THE PERMISSION SLIP

A grid fills the boardroom screen. Five rows, five columns, every square painted red, amber, or green. A finger lands on an amber square and a voice calls it acceptable. That gesture decided nothing. The square measured nothing. It is a permission slip, and its colour tells you one thing only: which rank is allowed to sign.

02 · BORN TO ESCALATE

The grid has a birthplace. In 1984 a United States military standard, 882B, first printed severity against probability as an explicit matrix, and beside each cell it named the rank cleared to accept that risk. A captain in one square, a general in another. The instrument answered who signs. It never once answered how much.

03 · FIVE BUCKETS

One row holds two different worlds. The row marked rare carries an event that strikes once in a thousand years beside one that strikes once in a million. A thousandfold gap, crushed into a single word. The column marked catastrophic sets a hundred-million loss next to a ten-billion one. Five buckets swallow the orders of magnitude, and rare, severe events turn on exactly what the buckets throw away.

05 · COLOUR VERSUS RULE

Britain took another road. Instead of refining the grid, it asked what to do with the field. A 1949 coal-board judgment set the test: you may refuse a safety measure only when its cost is grossly out of proportion to the harm it removes, and the larger the risk, the heavier the case you must make for doing nothing. The colour orders nothing. The rule orders the next move.

06 · UNFOLD THE CELL

There is a working form too. The red cell pulls open into a butterfly. On the left, every threat that drives toward the top event. On the right, every consequence it can spread into. A barrier sits on each path, and on each barrier a name and the date it was last tested. The odds may stay unknown. What is known is that barrier three has no owner.

07 · ONE LINE INSTEAD

One amber cell, opened, drops two risks it swore were equal: one a nuisance, one that ends the company. A single line takes the cell's place. Annual loss along the bottom, the chance of exceeding it up the side. It reads like a sentence. A ten-percent chance we lose more than two million this year, a one-percent chance we lose more than twenty. No buckets, the whole tail in view.

09 · THE APPARATUS THAT DECIDES

So keep the matrix for the work it was built to do: sort a hundred hazards cheaply, and say who signs. For the handful that could end you, let the grid dissolve. In its place stands the apparatus that actually decides. A rule, an owner, a price, a scenario. The cell was never the answer. It was the question we mistook for one.