Fable
Scattered guardrails cannot hold back the risks of a whole city
In its early years, Plateau City had only one main road. The city gate had guards, the granary had locks, the pharmacy had scales, and each place managed its own affairs. Life was fairly stable.
Later the city had docks, money houses, foreign merchant inns, and night markets. Each added its own guardrails: here they checked tickets, there they stamped seals, another place registered names. The guardrails multiplied, but the risk did not decrease.
The city lord once ordered an additional inspection everywhere. As a result, common people waited longer, the guards became exhausted, and truly high-risk passages were instead drowned out by low-risk chores.
A plague entered through a small post station. When the city lord reviewed it, he realized: the post station had registered travelers, the pharmacy had recorded symptoms, the city gate knew the origin, yet there was no shared goal or escalation rule. Every point did its job, and the whole city still failed.
The advisor laid out the whole city's risks, first listing the objectives: protect grain, water, money, the sick, and the city gates. Then for each objective, define the control domain, minimum requirements, responsible person, evidence, and review cadence.
The guardrails everywhere were not all removed; instead, they were placed into a unified framework. Duplicates were merged, gaps were filled, excessive downgrades were reduced, and key risks were assigned to dedicated owners. The next time a large number of foreign merchants entered the city, the city lord could see which controls protected identity, which protected transactions, which protected health, and which were used to detect anomalies. The whole city finally worked like a system.
The city lord brought in an old inspector and drew all the guardrails on a city map: which risks were already covered, where checks were duplicated, and which high-risk passages had no one watching. They removed several low-value checkpoints, moved people to the money house's night gate and the medicine shop's weighing station, and specified who checks each guardrail, how often to review, and how to report when it fails.
Once guardrails turned from scattered objects into a system, the city did not become slower—it became clearer. More controls are not always better; what matters is covering real risks and running continuously. The strategist said the point of a control framework is not to put more rules in every corner, but to make all rules work together around the same set of risk objectives.