Fable
Three layers of embankment, so the river city no longer entrusts flood control to a crowd of shouters
The river city flooded every year. In the early years there was only one low embankment, and the people living by the river piled sandbags themselves and repaired their houses after the water receded. When the city was small, this could still hold.
Later the city had warehouses, money houses, and pharmacies. Wherever the flood reached, the loss was no longer just a few households, but the entire city's grain, accounts, and medicine.
The city lord first formed a flood-control squad and had them go around reminding everyone to be careful. The squad was diligent, but it had to stack sandbags, inspect others, and assure the city lord of safety. The roles were mixed together.
A great flood burst the east bank. The merchants said they had reinforced based on experience, the flood control team said they had already warned, and the city lord's advisor said he had never received a real risk report. Everyone was doing flood control, yet the defense line was like a tangled ball of string.
The new system divides responsibility into three layers. The first layer is the riverside merchants, who own and manage their own risk; the second layer is the water authority and compliance officers, who set methods, supervise standards, and challenge optimism; the third layer is the independent levee inspectors, who periodically review whether the first two layers are effective.
After tiering, merchants could not shift risk to inspectors, water officials could not run the business on behalf of merchants, and dike inspectors did not participate in daily repairs. Before the next flood rise, problems surfaced earlier and responsibilities were less confused.
When the roles were first separated, merchants felt the water official was just making trouble, and the water official also wanted to stack the sandbags for the merchants. The independent dike inspector reminded them: once roles are mixed, when something goes wrong no one will be able to say clearly who was responsible.
After several rounds of flooding, the three layers began to work together. The first layer brought on-site changes, the second translated the changes into standards and challenges, and the third stepped back to see whether the whole arrangement had blind spots. The river city no longer relied on the fantasy of one all-powerful team for safety. Later, when newcomers entered, the old masters no longer began with abstract categories, but had them review that failure: where intuition had originally been relied on, why the first repair was insufficient, and how the new arrangement kept risk in a place that could be checked. Only when they could explain these details clearly, and also point out when to continue using it and when to upgrade it, were they considered to truly understand this approach. Later they also handed this approach to newcomers for drills: first have newcomers do it the old way and see how errors appeared; then redo it under the new rules and see which step was blocked in advance and which step left evidence. If newcomers could only recite names, they would still misuse it in similar scenarios; only those who could state the applicable boundaries, costs, and remedies after failure were allowed to take on work independently.