Control lost: R ≥ 1
Knight Capital
Equities market making · August 1, 2012
A faulty software deployment began firing erratic orders into the market at machine speed. By the time humans understood what was happening and pulled the plug, the damage was done: the loss that nearly ended the firm accrued in roughly forty-five minutes.
Two clocks: capability acted in milliseconds; control needed tens of minutes. L ≫ H, so the outcome was decided before anyone could decide anything.
Control lost: R ≥ 1
The Flash Crash
US equities · May 6, 2010
Interacting automated strategies drove a sudden, deep plunge and partial recovery within minutes. No single actor intended it; the system moved faster than any participant could interpret or arrest in real time.
Why it fits: the steering gear failed: you could watch, but not turn the wheel fast enough. Circuit breakers were the resilience patch added afterward.
Control lost: R ≥ 1
Chernobyl
Nuclear power · April 26, 1986
A test run outside safe parameters, with safety systems disabled, pushed the reactor into a state that escalated faster than operators could comprehend or counter. Understanding arrived far too late to correct.
Governance + resilience, both red: on an irreversible, high-stakes system, that combination is the book's veto condition: stop, no matter the schedule.
Control held: R < 1
The Montreal Protocol
Ozone layer · 1987
Faced with a global, slow-moving threat, governments detected the problem, agreed on binding limits, and adjusted them as the science evolved. Correction kept pace with, and then outran, the harm.
The denominator won: governance and steering were strong enough that humanity could notice, decide, and act before the gap became unrecoverable.
Control held: R < 1
Commercial aviation
A standing discipline of correction
Aviation grew safer as it grew more capable, not by slowing down, but by building a relentless feedback loop: investigate every incident, publish the findings, change the procedures, repeat. Correction compounds.
The doctrine in practice: velocity with vigilance. Each of the five gears is institutionalized, so H keeps growing alongside capability.
Proposed: grow the denominator
Verifiable Compute Commons
The book's flagship proposal · AI governance
Neutral, open infrastructure that makes a coordinated slowdown credible. Labs verify each other's compliance (FLOP ceilings, training provenance) through hardware attestation, without exposing models or data. The point is not enforcement: a defector is seen, not blocked. It is a worked answer to the verification problem that frontier labs themselves say a real slowdown would require.
Why it matters: a denominator move that buys back oversight by making a credible pause switchable in peacetime, not just a brake on speed. See the live project ›
The lesson is not that speed is bad. It is that speed is only safe when correction can keep up. That is the one test the book gives you, and the one the Scorecard makes routine.