Safety

Boeing

Boeing's 737 MAX failures show how commercial commitments, derivative design, fragmented hazard analysis, delegated certification, and training choices can keep dispersed safety evidence from governing a whole aircraft. Two crashes killed 346 people. A redesign returned the MAX to service, but a 2024 door-plug separation and continuing regulatory intervention showed that manufacturing quality, safety culture, and accountability remained governance problems.

How can a large engineering institution keep dispersed safety evidence authoritative while coordinating complex products under commercial and schedule pressure?

Ethiopian Airlines

Ethiopian Airlines became a competitive state-owned aviation group by turning a foreign operating partnership into local training, maintenance, cargo, network, and managerial capabilities. Its record supports a conditional claim about public ownership: professional systems can compound under long-horizon state commitment, but worker voice, conflict use, climate effects, and safety investigation must remain open to evidence that can overrule institutional prestige.

How can a low-income, landlocked state build and preserve the technical, commercial, and safety capability required to compete in a global industry across successive political regimes?

U.S. railroads, 1855–1887

Daniel McCallum and G. H. Henshaw's 1855 diagram of the New York and Erie Railroad made a geographically distributed hierarchy visible: divisions received authority while telegraphed reports made their performance visible to the center. Transcontinental construction and the railroads' 1883 adoption of standard time then showed the larger consequence—private networks could reorganize land, labor, markets, and even the public clock before federal time standards or effective interstate rate regulation existed.

When a private network must make distant work visible and simultaneous, who gains authority over the common world that its schedules and accounts create?

Vale and the Brumadinho dam disaster

Vale's Córrego do Feijão tailings dam failed above an occupied worksite after warning signs, adverse stability evidence, fragmented risk ownership, and compromised certification failed to stop it, killing 272 people and contaminating the Paraopeba watershed.

How can a mining company possess extensive safety data and professional controls yet organize them so that no signal acquires enough authority to prevent catastrophe?

Columbia Accident Investigation Board Report

The Columbia board explains the shuttle loss through two inseparable causal histories: foam damaged the orbiter's wing, and NASA's organization repeatedly converted that known anomaly into an accepted condition. The report is a landmark inquiry into how schedule pressure, fragmented authority, weak safety independence, and broken communication shape what technical evidence is allowed to mean.

Managing the Unexpected

Weick and Sutcliffe use hazardous operations and organizational failures to describe high reliability as a continuing pattern of attention rather than a permanent institutional trait. Their five-practice framework interprets evidence from aircraft carriers, air-traffic control, nuclear operations, firefighting, and other cases; it is an influential synthesis, not proof that adopting five labels makes a complex system safe.