The Field Guide › Paper
Eighteen numbered, aphoristic points, an internal technical note from the Cognitive Technologies Laboratory that was never formally journal-published and has nonetheless become one of the most quoted documents in the safety and resilience canon, circulated everywhere from aviation to software incident response. The argument builds cumulatively: complex systems are intrinsically hazardous and heavily defended, so catastrophe requires multiple small failures to combine, no single point failure is ever sufficient on its own, which means systems always run in a degraded state, carrying a constantly shifting set of latent flaws that individually look trivial. From this, Cook draws the point most load-bearing for practice: attributing an accident to a single 'root cause' is not a technical finding but a social one, the expression of a cultural need to localise blame, and he cites anthropological work on the social construction of causation to make the claim explicit rather than rhetorical. Hindsight bias is named directly as the primary obstacle to honest investigation. The middle points reframe practitioners: they hold a permanent dual role as both producers and defenders against failure that outsiders rarely credit, every action they take is a gamble made under uncertainty, and it is specifically their capacity to adapt, restructuring exposure, concentrating resources, creating pathways for recovery, that keeps the system inside tolerable limits moment to moment. The closing three points are the ones most often quoted alone and are worth keeping together: safety is an emergent property of the system, not a purchasable feature of any one component; people continuously create safety through exactly this ongoing adaptation, not through a one-off design decision; and, counterintuitively, failure-free operation actually depends on practitioners having had real contact with failure, without which no one can sense where the edge of tolerable performance actually is.