Unit Review: Organizational Moral-Hazard and Resilience 2.3C.4-R

Key Structural Points

• An organization that does not scan for its own moral hazards will eventually be governed by them — systemic moral-hazard awareness (1.2.8) makes incentive failures visible before they reshape the institution from within.

• Three categories of organizational moral hazard require distinct counter-structures: power concentration (segregation of duties, role rotation, whistle-safe channels), misaligned incentive (metric alignment, rotation, clawbacks), and capture (polycentric oversight, term limits, public exceptions).

• The quarterly hazard scan examines authority distribution, metric alignment, exception patterns, whistle-safe channel reports, and structural bypass — producing a hazard heatmap that tracks risk trends across decision domains.

• Counter-gaming installs are concrete, not aspirational: metric rotation, randomized audits, clawbacks tied to bad signals, and published hazard heatmaps that make the detection public and auditable.

• Incident response and postmortem practice at the organizational level are not a standalone resilience pattern — they ground in three separate places. Incident response and graceful degradation ground in the staged-judgment lifecycle (2.2.1-3) and the restraint principle's bounded-failure logic (1.2.3). Blameless postmortems ground in answerability's error-not-evasion distinction (1.2.7) and Kelley's benevolence. Recovery tracking — reopen rate, time-to-learning — grounds in epistemic integrity's correction-channel discipline (1.2.1), and measures whether that channel stays open, not whether the organization has "achieved resilience."

• Bounded interdependence (1.2.6) applied to vendor relationships recommends standardized portability, escrowed critical artifacts, explicit exit terms, and diversification of critical dependencies — grounded in the institution's own interest in avoiding lock-in, not an entitlement owed to a departing vendor.

• The organization evidence pack assembles all Sub-Arc 3C artifacts — charter, accountability ladders, protocol decisions, data governance, hazard scans, postmortems, vendor terms — into a minimal, privacy-preserving packet following the principle: processes public by default, persons private by default.

• Phase I's strain condition on politics under concentrated institutional failure (1.3.9) applies directly: institutions that concentrate authority without visible, auditable check mechanisms are the organizational expression of the load case.

Philosophical Lexicon

• systemic moral-hazard awareness — Its one WP4-grounded pattern is narrow: locating where a state-created shield has compelled a nonconsenting third party to underwrite a risk they never accepted. The broader hazard-scan, counter-gaming, and capture-pathway toolkit this unit builds is retained as an admitted-practice appendix — institutional management RO recommends because it works, not philosophy RO derives because rights require it. One of RO's nine design patterns. (RO)
• bounded interdependence — For voluntary cooperative arrangements — like the vendor relationships this unit covers — a design recommendation: clean exit, meaningful recourse, and data portability, grounded in the builder's own self-interest, not an entitlement owed to a departing participant. One of RO's nine design patterns. (RO)
• capture — The process by which an institution's structure is gradually redirected to serve the interests of its powerful actors rather than its stated purpose; incremental, not sudden. (RO)
• Goodhart's Law — When a measure becomes a target, it ceases to be a good measure; the structural mechanism behind metric gaming in organizations. (Conventionally capitalized in the source tradition.)
• evidence pack — A minimal, privacy-preserving collection of artifacts that proves practice without performative exposure; assembled at each application level, synthesized in (2.3D.4). (RO)

Unit Glossary

• hazard heatmap — A quarterly assessment mapping decision domains by impact and control effectiveness; surfaces the institution's highest-risk areas for structural investment.
• counter-gaming install — A specific structural mechanism deployed against an identified moral hazard: metric rotation, randomized audit, clawback, or published heatmap.
• incident response runbook — A pre-committed decision framework defining roles, triggers, communications, and escalation thresholds for organizational incidents — defined before the crisis, not during it.
• blameless postmortem — A structured investigation of institutional failure that examines what the structure allowed to go wrong without assigning individual blame; produces structural change, not behavioral exhortation.
• graceful degradation — The design condition in which an institution continues functioning at reduced capacity during an incident rather than failing entirely.
• reopen rate — The frequency with which a resolved incident recurs; measures whether structural fixes are genuine or superficial.

Concept Check

• Why does the article classify moral hazards into three distinct categories (power concentration, misaligned incentive, capture)? What structural difference between them requires different counter-structures?

• The quarterly hazard scan examines five dimensions. Pick two and explain what specific organizational failure each is designed to detect.

• How does Goodhart's Law explain the misaligned-incentive hazard? What structural counter-mechanism does the article prescribe for metrics that have become targets?

• Why does the article argue that capture is incremental rather than sudden? What makes incremental capture harder to detect than acute power concentration?

• The incident response runbook separates investigation from remediation. Why does the article insist on this separation, and what structural failure results from combining them?

• The article grounds "blameless" in answerability's (1.2.7) error-not-evasion distinction rather than in a generic resilience posture. What does that distinction actually protect, and what would a postmortem process look like if it protected evasion instead of error?

• How does the blameless postmortem differ from narrative accountability (2.3C.1-3)? What structural overlap exists, and what does the postmortem add that narrative accountability alone does not provide?

• Bounded interdependence (1.2.6) applied to vendor relationships recommends four structural conditions. If an organization meets three (portability, escrow, diversification) but not the fourth (explicit exit terms), what structural risk remains?

• The organization evidence pack follows the principle "processes public, persons private." What specific artifacts from the unit illustrate each side of this boundary?

Points to Ponder

• Think about a metric your organization uses to evaluate performance. If that metric became the sole basis for recognition or compensation, how would rational members change their behavior? What would a Goodhart map of your organization reveal?

• Consider a vendor relationship your organization depends on. Could you switch vendors within ninety days without losing critical data or functionality? If not, what structural investment would make exit practically exercisable?

• The article argues that an institution's own structure creates the incentives for people to game it. Has your organization ever discovered that a rule, policy, or metric was producing behavior opposite to what was intended? What structural change resulted — or did the organization respond with behavioral exhortation instead?

To Learn More

• Kerr, Steven. "On the Folly of Rewarding A, While Hoping for B." Academy of Management Journal 18, no. 4 (1975): 769–783. The classic diagnostic of incentive misalignment — where organizations reward the behavior they wish to discourage while penalizing what they desire — directly relevant to the hazard scan's examination of metric gaming and the counter-gaming installs prescribed in this unit.

• Hirschman, Albert O. Exit, Voice, and Loyalty: Responses to Decline in Firms, Organizations, and States. Cambridge, MA: Harvard University Press, 1970. Introduces the exit-voice framework that grounds bounded interdependence — the structural insight that participation is voluntary only when exit is practically exercisable, directly relevant to the vendor interdependence section and its four structural conditions.

• Perrow, Charles. Normal Accidents: Living with High-Risk Technologies. New York: Basic Books, 1984. Argues that in tightly coupled, complex systems, certain failures are structurally inevitable — the foundational insight behind this unit's incident response practice, which assumes failure will occur and designs for graceful degradation and structural learning rather than prevention alone.