A field note from the Jambot

NEED MODEL
TO MAKE PLAN

What Project Hail Mary and Donella Meadows unlock about teams, systems,
and the leverage points worth pulling.

MODEL
PLAN
ACT
OBSERVE
UPDATE
Where this started

Rocky names the whole method.

Three sentences. One operating model for complex work.

Clarity
"Need to know why star not die."
What exactly must be understood?
Commitment
"Need plan."
What must we do next?
Explanation
"Need model to make plan."
What makes the plan worth trusting?

Most teams are comfortable with sentence two. The work is protecting sentence one and sentence three.

The trap

Most project work lives in sentence two.

We rush from symptom to plan before anyone has built a shared explanation of the system.

Symptom
Plan
Work
MODEL MISSING

The missing middle is the modeling conversation: the work that turns a symptom into a shared explanation.

"We need a platform adoption plan." Maybe. But first: why is adoption stalled? Lack of awareness? Bad fit? Broken incentives? The wrong platform model altogether?

The cinematic pattern

The heroes do not find the answer.

They improve the model until the right action becomes visible.

OBSERVE
TEST
UPDATE
⟵ converge ⟶
MODEL
FAIL
INTERVENE

The drama is learning. The team iterates through explanations until the right action becomes visible.

The familiar scene

It takes fifty people to fix what five understand.

The size of the incident call is a symptom, not a response strategy.

50 ON THE CALL
05 CARRY THE MODEL

Everyone else is helping reconstruct it in real time.

The pivot
BOXES DON'T FAIL.
LOOPS DO.

A box is a noun. A loop is a verb. Outages are verbs we never wrote down.

Topology at rest
PRODUCER
BROKER
CONSUMER
Behavior in motion
RETRY STORM
SLOWER CONSUMER
MORE LAG
The modeling language

Stocks. Flows. Feedback loops.

Three primitives turn tacit expertise into a model the team can inspect.

Stocks
What accumulates
backlog · lag · trust · debt
Flows
What changes the stock
arrival · completion · learning
Feedback
What changes behavior
balancing · reinforcing · delayed

A shared vocabulary for making system behavior something a team can argue about and change.

The pattern library

Six shapes describe how systems break.

The stack changes. The failure structure repeats.

01
Reinforcing Loop Runaway
Amplification with no correcting brake
02
Balancing Loop Failure
Correcting signal arrives too late or too weak
03
Delay-Induced Oscillation
Overcorrection from lagged feedback
04
Buffer Exhaustion
Capacity consumed faster than it replenishes
05
Information Gap
Decision made on stale or missing signal
06
Paradigm Lock
Mental model prevents seeing the failure

Failure shapes name the behavior. The model tells you where to intervene.

The missing layer

Need model to know where to act.

A model selects the depth of intervention, not just explains the behavior.

Failure Shape
What behavior is this?
System Model
What structure creates it?
Leverage Point
Where can we change it?

Same symptom. Different model. Different leverage.

The depth gauge

Not every intervention is equal.

Meadows' leverage points move from visible adjustments to deeper changes in system behavior.

Shallow / Easier to touch
12 · Parameters
11 · Buffers
10 · Stock / flow structures
Structural / Changes response
09 · Delays
08 · Balancing feedback
07 · Reinforcing feedback
Governing / Changes conditions
06 · Information flows
05 · Rules
04 · Self-organization
Deep / Changes what's possible
03 · Goals
02 · Paradigms
01 · Transcend paradigms

Most teams iterate at the surface. The model tells you when the behavior lives deeper.

The inversion

Organizations overuse the weakest levers.

The visible levers are manageable. The powerful levers require questioning the model.

Common response
Change the number.
Add capacity.
Adjust the deadline.
Install another process.
Structural response
Change who sees the signal.
Change the rule.
Change the goal.
Question the paradigm.

Shallow levers are easy to reach. The model tells you when the behavior lives somewhere they cannot touch.

01
REINFORCING LOOP RUNAWAY
R · AMPLIFYING

The loop that drives your growth can also drive your worst collapse.

Infrastructure
Kafka consumer lag
slow consumer → errors → retries → more events → slower consumer
AI Systems
Agent runaway: failed tool call loops to $47K. RLHF reward hacking: model learns to elicit high ratings until the benchmark is the only thing it can satisfy.
Intervention
Design the balancing loop before the reinforcing loop runs. Circuit breakers, error budgets, token limits. The brake has to exist before the loop needs it.
06
PARADIGM LOCK
DEEPEST LEVER

"The model of the system became the system. And the system outgrew the model."

Engineering
"We're a monolith shop": cited as policy after 40 microservices are already running. The paradigm is the last thing to update.
AI Systems
Saturated benchmarks still cited as the north star after the model has clearly outgrown what the benchmark measures.
Intervention
Surface the paradigm explicitly and ask whether it still describes the system you are actually in. Good thinking keeps producing bad outcomes. The frame is the thing to question, not the thinking.
The generation chain

The six don't fire at random.

They generate each other in a fixed order. Learn the topology once and you stop meeting these failures for the first time at 2am.

06
Paradigm Lock
05
Information Gap
01
Reinforcing Runaway
04
Buffer Exhaustion
03
Delay Oscillation
02
Balancing Failure

Paradigm lock starves an information channel: the missing signal lets a reinforcing loop compound, the loop drains a buffer until it collapses, and the balancing loop fires into a system already past the point of easy correction.

Worked example · the feature factory

Every mode in the chain is invisible from inside the paradigm that created it.

Paradigm lock (feature factory) → starves an information channel → info gap (research off the roadmap) → missing signal lets a loop run → reinforcing runaway (complexity compounds) → drains capacity → buffer exhaustion (eng capacity gone) → collapses as a lagged spike → delay oscillation (reorg 18 months too late) → correcting loop fires → balancing failure (too weak, too late)

Stand at any node. Name what's upstream. That's the next incident before it surfaces.

One symptom, many depths

"Platform adoption has stalled."

The model changes what the team can imagine.

Change the adoption targetParameter · 12
Add enablement capacityBuffer · 11
Improve onboarding flowStock / flow · 10
Expose abandonment signalsInformation flow · 06
Change contribution rulesRules · 05
Optimize for reduced cognitive loadGoal · 03
Question centralized platform as the modelParadigm · 02

Same symptom. Different model. Different leverage entirely.

Example

"AI quality is drifting."

A deeper intervention improves the system. Raising the eval threshold improves the gauge.

Surface move
Raise eval threshold
Add more test cases
Tune the prompt
Retrain on recent outputs
Model question
Are our instruments drifting with the model?
What user signal is missing?
Who can falsify the benchmark?
What goal is the system optimizing?
Deeper lever
Information flows
Rules for release
Goal of quality
Paradigm of evaluation

When instruments co-evolve with the thing they measure, the dashboard can stay green while reality gets worse.

Example

"The incident keeps coming back."

A postmortem that stops at the surfacing layer buys the recurrence.

Symptom
Consumer lag
Shape
Reinforcing loop
Model
Retries amplify lag
Lever
Feedback + rules
Test
Throttle retry policy
Act
Change retry budget

The fix changes from "restart the consumer" to "change the loop that keeps recreating the same failure."

The ceremony

A repeatable practice for learning where the system can actually be changed.

Name
What is the system doing?
Model
What structure produces it?
Locate
Which leverage point matters?
Test
What would prove us wrong?
Act
Change the system.
Observe
Did behavior change?
Update
Revise the model.

Not a workshop. A way of working.

What changed with my teams

We stopped asking "Who owns the box?"

We started asking what behavior the system was producing, and what leverage point governed it.

Before
Who owns this service?
Which team missed the handoff?
Which tool should we replace?
What process should we add?
After
What is accumulating?
Which loop is amplifying it?
Which signal arrives too late?
Which leverage point are we pulling?
The separation

Good teams execute.
Amazing teams model together.

Good teams
execute the plan
Amazing teams
improve the model until the right action becomes visible

The modeling conversation is the work. Coordinated action follows from it.

YOU CANNOT PLAN
A SYSTEM YOU
CANNOT MODEL.

You cannot change a system until you find where the leverage lives.

Name · Model · Locate · Test · Act · Observe · Update