Interactive graph
Safety by Design
Table of Contents
Build workflows so the dangerous move is hard - not just a warning label and good intentions.
Key Concept
- Rollback is undo-by-design when release goes loud.
- Staged Rollout means fewer people hit before the hazard is proven safe.
- Make the dangerous move hard by default - not just forbidden on paper.
Level 1 - Recognize
Safety by design builds workflows so the dangerous move is hard - not just a warning label and good intentions.
Level 2 - Explain
Rollback baked into release design - undo is a feature, like a gate that opens toward the fence, not the street.
Level 3 - Use
Move the hot oil station off the walk lane before buying more warning signs.
Level 4 - Connect
Because loud failures happen, systems that assume rollback recover faster than heroics - Staged Rollout limits who hits before the hazard is proven safe.
Level 5 - Create
Architect Reversibility at design time - make the dangerous move hard by default, not forbidden on paper only.
Examples
- We moved the hot oil station off the walk lane before buying more warning signs - glad design beat another lecture.
- The playground gate opens toward the fence, not the street - design beat another lecture.
Note Relationships
| Relationship | Wikilink | Reason |
|---|---|---|
| contradicts | Develop, Don't Endanger | when the opposite frame fits better |
| extends | Eliminate Before Managing | Design out the hazard before you label it |
| extends | Hierarchy of Controls | Hard-to-cause harm is elimination at the top of the ladder |
| extends | Rollback Principle | Rollback is undo-by-design when release goes loud |
| extends | Staged Rollout | Fewer people hit before the hazard is proven safe |
