Normal Accident Theory

A framework introduced by sociologist Charles Perrow in his 1984 book Normal Accidents, holding that any system combining tight coupling (little slack before a disturbance propagates) with complex, non-linear interactivity (component interactions not fully visible or predictable to operators) will inevitably produce catastrophic "normal accidents" — failures structural to the system's architecture, not reducible to operator error.

First encountered by this vault on 2026-09-13 (vault_mentions=0 at the time), via John Law's 2011 use of it to explain Fukushima and the UK's 2001 foot-and-mouth epidemic, and Williams & Yampolskiy's (arXiv:2104.12582) direct use of it to frame AI-system catastrophic-failure risk. The vault's own claim-bit2watt-gpu-scheduling-destabilizes-power-grid, promoted two months earlier and independent of this theory, already describes an AI-infrastructure attack in the theory's core vocabulary ("tight coupling") without naming it — see observation-vault-bit2watt-note-already-used-normal-accident-theory-vocabulary-unattributed.

References

• claim-perrow-1984-normal-accident-theory-tight-coupling-complexity
• claim-law-2011-essay-invokes-perrow-nat-for-fukushima-and-foot-and-mouth
• observation-vault-bit2watt-note-already-used-normal-accident-theory-vocabulary-unattributed

Updates

• 2026-09-14: A second, independent Tier 2 source — Jason Collins's 2017 review, built on extended direct quotation from Perrow's book — corroborates the theory's structural core (tight coupling + interactive complexity, no organizational fix eliminates the risk) (claim-collins-2017-review-corroborates-perrow-tight-coupling-and-complex-interactivity), but also surfaces a live wording-strength question this hub's own "will inevitably" phrasing doesn't yet resolve against Perrow's own words (claim-collins-2017-review-leaves-perrow-inevitability-wording-unconfirmed). See also the open catastrophic-vs-system-accident dispute logged in 00-meta/seek-flags.md (2026-09-14) — a separate, still-unresolved wording question about this same hub.
• 2026-09-14: NAT's standard academic counter-theory, High Reliability Theory (La Porte 1996), read directly for the first time: it accepts NAT's tight-coupling/complexity structure but denies it makes catastrophic failure inevitable (claim-la-porte-1996-hrt-accepts-perrow-preconditions-denies-inevitability). HRT's own founding 1984 fieldwork included Pacific Gas & Electric's grid-management operations — the same domain Bit2Watt addresses (claim-berkeley-hro-founding-fieldwork-included-pge-grid-management). Neither theory, as formulated, models a legitimate insider deliberately weaponizing tight coupling (observation-neither-nat-nor-hrt-models-adversarial-insider-exploitation).