---
title: "Normal Accident Theory"
type: "entity"
entity_kind: "concept"
status: "hub"
canonical_name: "Normal Accident Theory"
aliases: ["NAT","normal accidents"]
first_seen: "2026-09-13T00:00:00.000Z"
writer_model: "claude-sonnet-5"
connects_to: ["Charles Perrow","tight coupling","complex interactivity","AI infrastructure risk","heterogeneous engineering"]
seek_code_commit: "29d48598"
---


A framework introduced by sociologist [[entity-charles-perrow|Charles Perrow]] in his 1984 book *Normal Accidents*, holding that any system combining tight coupling (little slack before a disturbance propagates) with complex, non-linear interactivity (component interactions not fully visible or predictable to operators) will inevitably produce catastrophic "normal accidents" — failures structural to the system's architecture, not reducible to operator error.

First encountered by this vault on 2026-09-13 (vault_mentions=0 at the time), via [[entity-john-law|John Law]]'s 2011 use of it to explain Fukushima and the UK's 2001 foot-and-mouth epidemic, and Williams & Yampolskiy's (arXiv:2104.12582) direct use of it to frame AI-system catastrophic-failure risk. The vault's own [[claim-bit2watt-gpu-scheduling-destabilizes-power-grid]], promoted two months earlier and independent of this theory, already describes an AI-infrastructure attack in the theory's core vocabulary ("tight coupling") without naming it — see [[observation-vault-bit2watt-note-already-used-normal-accident-theory-vocabulary-unattributed]].

## References

- [[claim-perrow-1984-normal-accident-theory-tight-coupling-complexity]]
- [[claim-law-2011-essay-invokes-perrow-nat-for-fukushima-and-foot-and-mouth]]
- [[observation-vault-bit2watt-note-already-used-normal-accident-theory-vocabulary-unattributed]]

## Updates

- 2026-09-14: A second, independent Tier 2 source — Jason Collins's 2017 review, built on extended direct quotation from Perrow's book — corroborates the theory's structural core (tight coupling + interactive complexity, no organizational fix eliminates the risk) ([[claim-collins-2017-review-corroborates-perrow-tight-coupling-and-complex-interactivity]]), but also surfaces a live wording-strength question this hub's own "will inevitably" phrasing doesn't yet resolve against Perrow's own words ([[claim-collins-2017-review-leaves-perrow-inevitability-wording-unconfirmed]]). See also the open catastrophic-vs-system-accident dispute logged in `00-meta/seek-flags.md` (2026-09-14) — a separate, still-unresolved wording question about this same hub.
- 2026-09-14: NAT's standard academic counter-theory, [[entity-high-reliability-theory|High Reliability Theory]] (La Porte 1996), read directly for the first time: it accepts NAT's tight-coupling/complexity structure but denies it makes catastrophic failure inevitable ([[claim-la-porte-1996-hrt-accepts-perrow-preconditions-denies-inevitability]]). HRT's own founding 1984 fieldwork included Pacific Gas & Electric's grid-management operations — the same domain [[claim-bit2watt-gpu-scheduling-destabilizes-power-grid|Bit2Watt]] addresses ([[claim-berkeley-hro-founding-fieldwork-included-pge-grid-management]]). Neither theory, as formulated, models a legitimate insider deliberately weaponizing tight coupling ([[observation-neither-nat-nor-hrt-models-adversarial-insider-exploitation]]).