Reading Failure Modes

Reading a failure mode is a skill, not a reference lookup. The taxonomy gives you the vocabulary. The drills give you the eye. Both are required, and neither substitutes for the other.

Vocabulary first, eye second

Naming a failure mode from a list is bookwork. Naming one in the third minute of a live incident, from partial signals, under time pressure, is the skill. The gap between the two is wider than most practitioners expect, and it does not close by reading.

It closes by repetition against real failure shapes. The academy's drills replay observed failures, not idealized ones, because the field does not present itself in textbook form. Real failures are quiet, partial, and ambiguous at the edges. The eye is trained on exactly that ambiguity.

What reading actually is

Reading a failure mode means answering three questions quickly. What family is this. What is it doing now. What does it do next. The taxonomy carries the first question. The drills train the other two, because prediction is where the skill lives.

An escape that is found early is an incident. An escape found late is a breach. The difference is usually minutes, and the minutes belong to the practitioner who recognized the shape.

Why the drills are the harnesses

The drills run on the lab's published harnesses, the same ones used in research. That continuity is deliberate. The failure a practitioner drills against this year is drawn from the failures the lab observed in the field. When the library updates, the eye updates with it.

Reading failure modes is the academy's core skill because every other skill depends on it. Detection without it is noise. Response without it is guessing. With it, both become craft.