Fable
Only after the four-sided compass was calibrated did the autonomous fleet dare leave port
Harbor City was going to build an automatic drawbridge. It rose when the tide came and lowered when the carts came, and both the fleet and the caravan relied on it to be on time. The craftsmen first made the bridge very ingenious, and no one hurried to write clearly under what conditions it should stop.
The bridge opening went smoothly. The bridge could hear bells, see semaphore signals, and act in advance based on wind direction. The mayor thought that as long as the bridge was smart enough, the port would be faster, and pushed to build the same bridge on both the north and south banks.
The first misunderstanding soon appeared. People took "the bridge can move" to mean "the bridge is reliable." On a foggy day, the fleet mistakenly sent a white flag, and the bridge did not rise; another time, the market-bound carriages were too dense, and to accommodate the traffic, the bridge made a salt ship wait too long beside the reef.
The town hall first added a rule: in fog, everyone must slow down. As a result, accidents still happened on clear days when signal flags were wrong, and on windy nights no one knew whether to attend to boats or carts first. The rule was like a patch, covering only the last wound.
The old port official proposed a different approach. He divided the bridge's risks into several categories: mishearing signals, misjudging weather, injuring pedestrians, delaying cargo schedules, and no one taking responsibility. For each category he wrote clearly the possible consequences, monitoring methods, bridge closure conditions and review cycle.
At first the craftsmen found it troublesome, but later they discovered that this table did not bind them; it gave their arguments an order. First they had to explain whom the bridge served, which losses were unacceptable, and who had the authority to temporarily stop the bridge—then they could discuss whether to speed up the gears.
Before construction of the second bridge began, the mayor didn't just ask "can it be faster." He asked who watches on foggy days, how a wrong flag is detected, who reviews after an accident, and how often old rules are revisited. The bridge would still fail, but the city no longer waited for an accident to happen before scrambling for reasons. The port also arranged a drill: deliberately delaying flag signals, causing convoy congestion, and having a captain raise a protest. Only then did the craftsmen see that risk comes not just from the bridge itself, but from people, processes, weather, and post-incident handling all interlocking. They also graded risks by severity. A false bell might only cost half a quarter-hour, but trapping a pedestrian was absolutely unacceptable; a delivery delay could be compensated with money, but a bridge losing control had to be shut down immediately. With severity graded, the craftsmen knew where to add redundancy, where a reminder sufficed, and where someone had to be on watch.
The harbor official locked that ledger in the bridge house. The ledger was not a talisman guaranteeing perfection, but rather kept a bridge that could move on its own always within identifiable, measurable, and actionable boundaries.