Organizations

Where Decisions Take Hold

The Columbia investigation traces a signal that was detected and widely shared yet never acquired stable status as a mission-critical decision problem.

A thick impasto oil painting, seen close up: stacked isometric levels painted as dark oil blocks, with a small dab of indigo — the protagonist block — arrived on the lowest plane inside a soft painted halo of light.
A thick impasto oil painting, seen close up: stacked isometric levels painted as dark oil blocks, with a small dab of indigo — the protagonist block — arrived on the lowest plane inside a soft painted halo of light.

A signal can travel widely and still fail to become an institutional question. The Columbia Accident Investigation Board’s reconstruction of mission STS-107 provides an unusually detailed example. On the day after launch, NASA’s Intercenter Photo Working Group found a large debris strike while reviewing ascent imagery. It had no conclusive view of the impact. Its initial report nevertheless located the debris at the left bipod area, described it as large and fast, and placed the strike near the leading edge on the underside of the left wing, possibly at tile or reinforced carbon-carbon. The group circulated a report and digitized clip across NASA and its contractors.1

No one on the mission then knew the damage later established by the investigation. They had evidence of an unusual strike and unresolved uncertainty about where it had hit and what it had done. The case should therefore be read from that contemporaneous position. Hindsight can reconstruct the consequence; it cannot fairly be inserted into the information available during the flight.

This essay has used three possible stalls as a diagnostic: at the sensor, in translation, and at commitment. They are an authorial heuristic, not an established taxonomy. Working backward from three actual decisions in the Columbia record shows where the categories help and where they fail.

The imagery decision: detection without ownership

The sensor category does not fit literally. The strike was detected, analyzed, and communicated. Requests for better imagery also began early. The Photo Working Group’s chair approached management on Flight Day Two, and the Board ultimately identified three independent requests for on-orbit images.

The stall lay in institutional registration and escalation. The Debris Assessment Team was not chartered as a formal Tiger Team, and the report found that no mission manager owned its work. Its request travelled through the Engineering Directorate rather than the operational mission channel. That route made a potentially critical input appear to management as a non-urgent engineering preference. On Flight Day Seven, after Defense Department contacts had begun identifying imaging options, the preparatory action was cancelled. Managers had focused on who could state a mandatory requirement for the images.

The imagery decision exposes a circular evidence rule. The assessment team wanted images to bound the location and extent of possible damage. Images would not have guaranteed a diagnosis. Yet without them the team could not reduce the uncertainty needed to demonstrate that imaging was mandatory. Further evidence was made conditional on the existing evidence already proving a safety problem.

The analytical decision: uncertainty compressed

Translation is a better fit. The team worked from incomplete imagery and used an impact model called Crater. The estimated event sat far outside parts of the tool’s test base: the estimated projectile volume used in the analysis was 400 times the largest test projectile. Crater initially predicted damage deeper than the tile. Engineers discounted that output using judgments about the model’s conservatism and the denser lower tile layer. Conclusions about possible reinforced carbon-carbon damage also relied largely on judgment rather than a suitable analysis.

Expert judgment under uncertainty was unavoidable. The failure identified by the Board concerned what survived the handoff. The assumptions and their uncertainties were not fully presented to either the Mission Evaluation Room or Mission Management Team. Although a strike on the carbon-carbon leading edge remained possible, the briefings did not address damage there. On 24 January, the discussion compressed into a bottom line: no safety-of-flight issue, with possible repair work after landing. The official minutes did not mention the debris strike at all.

This is a translation stall, but not translation alone. What the summary retained depended on the standard of evidence being applied to the next decision. Compression and commitment had begun to do each other’s work.

The safety decision: authority was present

The original commitment category assumed that people understood the issue but no one was authorized to decide. Columbia does not fit. Authorized managers made consequential decisions. The external-imagery effort was stopped. The strike was treated as a turnaround concern rather than an in-flight safety issue. According to the Board, program managers required engineers to prove that the system was unsafe instead of requiring a demonstration of safety before release.

The third diagnostic therefore has to cover more than indecision. It must ask who commits the organization, under which evidence standard, and how that commitment can be reopened. Three responsibilities were distinct in this case: obtaining additional imagery, setting the burden of evidence, and making the safety-of-flight determination. Their interaction governed whether unresolved uncertainty would produce another action.

This structural reading does not dissolve individual responsibility. The Board found failures of leadership and communication. It also warned that replacing the people involved would not by itself solve NASA’s problems because organizational conditions shaped their choices. The analytical task is to hold both levels together: identify who exercised authority, and identify the channels and rules within which that authority operated.

A revised diagnostic

The case leaves three questions that are more useful than the original labels:

  1. Registration and escalation: When does an observation become an owned institutional case, and who can raise it into the operational decision process?
  2. Translation: Which assumptions, uncertainties, and alternatives must travel with a summary so that the recipient does not mistake an interim judgment for a settled fact?
  3. Commitment: Who sets the evidentiary threshold and authorizes action, and what allows that decision to be revised when new information appears?

They are not separate stages. An evidence rule affects whether a signal is registered; a summary can pre-commit the recipient; a decision about imagery determines which facts can become available later. The overlaps are part of the diagnosis rather than noise to be removed from it.

The CAIB report is a retrospective investigation of one event, not proof of a general law about institutions. It does show why delivery is an inadequate measure of information flow. The clip reached many recipients. What mattered was the status the strike acquired, the standard by which its uncertainty was judged, and the authority to turn that judgment into a revisable course of action.

Footnotes

  1. Columbia Accident Investigation Board, Report Volume I, Chapter 6, “Decision Making at NASA”, August 2003, especially Section 6.3 and Findings F6.3-1 through F6.3-29. This is a retrospective official accident investigation drawing on contemporaneous logs, emails, analyses, and testimony. The essay follows the Board’s reconstruction and does not assign motives beyond its findings.

Oliver Wrede writes and teaches on interface design, knowledge systems, and the architecture of intelligence in organizations. He is interested in how humans, institutions, and machines reason together — and how design shapes the quality of that reasoning.

More from Oliver Wrede