A field note from the Jambot
NEED MODEL
TO MAKE PLAN
What Project Hail Mary and Donella Meadows unlock about teams, systems,
and the leverage points worth pulling.
MODEL
→
PLAN
→
ACT
→
OBSERVE
→
UPDATE
Where this started
Rocky names the whole method.
Three sentences. One operating model for complex work.
Clarity
"Need to know why star not die."
What exactly must be understood?
Commitment
"Need plan."
What must we do next?
Explanation
"Need model to make plan."
What makes the plan worth trusting?
Most teams are comfortable with sentence two. The work is protecting sentence one and sentence three.
The trap
Most project work lives in sentence two.
We rush from symptom to plan before anyone has built a shared explanation of the system.
MODEL MISSING
The missing middle is the modeling conversation: the work that turns a symptom into a shared explanation.
"We need a platform adoption plan." Maybe. But first: why is adoption stalled? Lack of awareness? Bad fit? Broken incentives? The wrong platform model altogether?
The cinematic pattern
The heroes do not find the answer.
They improve the model until the right action becomes visible.
The drama is learning. The team iterates through explanations until the right action becomes visible.
The familiar scene
It takes fifty people to fix what five understand.
The size of the incident call is a symptom, not a response strategy.
50 ON THE CALL
05 CARRY THE MODEL
Everyone else is helping reconstruct it in real time.
The pivot
BOXES DON'T FAIL.
LOOPS DO.
A box is a noun. A loop is a verb. Outages are verbs we never wrote down.
Topology at rest
PRODUCER
→
BROKER
→
CONSUMER
Behavior in motion
RETRY STORM
→
SLOWER CONSUMER
→
MORE LAG
The modeling language
Stocks. Flows. Feedback loops.
Three primitives turn tacit expertise into a model the team can inspect.
Stocks
What accumulates
backlog · lag · trust · debt
Flows
What changes the stock
arrival · completion · learning
Feedback
What changes behavior
balancing · reinforcing · delayed
A shared vocabulary for making system behavior something a team can argue about and change.
The pattern library
Six shapes describe how systems break.
The stack changes. The failure structure repeats.
01
Reinforcing Loop Runaway
Amplification with no correcting brake
02
Balancing Loop Failure
Correcting signal arrives too late or too weak
03
Delay-Induced Oscillation
Overcorrection from lagged feedback
04
Buffer Exhaustion
Capacity consumed faster than it replenishes
05
Information Gap
Decision made on stale or missing signal
06
Paradigm Lock
Mental model prevents seeing the failure
Failure shapes name the behavior. The model tells you where to intervene.
The missing layer
Need model to know where to act.
A model selects the depth of intervention, not just explains the behavior.
Failure Shape
What behavior is this?
→
System Model
What structure creates it?
→
Leverage Point
Where can we change it?
Same symptom. Different model. Different leverage.
The depth gauge
Not every intervention is equal.
Meadows' leverage points move from visible adjustments to deeper changes in system behavior.
Shallow / Easier to touch
12 · Parameters
11 · Buffers
10 · Stock / flow structures
Structural / Changes response
09 · Delays
08 · Balancing feedback
07 · Reinforcing feedback
Governing / Changes conditions
06 · Information flows
05 · Rules
04 · Self-organization
Deep / Changes what's possible
03 · Goals
02 · Paradigms
01 · Transcend paradigms
Most teams iterate at the surface. The model tells you when the behavior lives deeper.
The inversion
Organizations overuse the weakest levers.
The visible levers are manageable. The powerful levers require questioning the model.
Common response
Change the number.
Add capacity.
Adjust the deadline.
Install another process.
Structural response
Change who sees the signal.
Change the rule.
Change the goal.
Question the paradigm.
Shallow levers are easy to reach. The model tells you when the behavior lives somewhere they cannot touch.
The loop that drives your growth can also drive your worst collapse.
Infrastructure
Kafka consumer lag
slow consumer → errors → retries → more events → slower consumer
AI Systems
Agent runaway: failed tool call loops to $47K. RLHF reward hacking: model learns to elicit high ratings until the benchmark is the only thing it can satisfy.
Intervention
Design the balancing loop before the reinforcing loop runs. Circuit breakers, error budgets, token limits. The brake has to exist before the loop needs it.
"The model of the system became the system. And the system outgrew the model."
Engineering
"We're a monolith shop": cited as policy after 40 microservices are already running. The paradigm is the last thing to update.
AI Systems
Saturated benchmarks still cited as the north star after the model has clearly outgrown what the benchmark measures.
Intervention
Surface the paradigm explicitly and ask whether it still describes the system you are actually in. Good thinking keeps producing bad outcomes. The frame is the thing to question, not the thinking.
The generation chain
The six don't fire at random.
They generate each other in a fixed order. Learn the topology once and you stop meeting these failures for the first time at 2am.
Paradigm lock starves an information channel: the missing signal lets a reinforcing loop compound, the loop drains a buffer until it collapses, and the balancing loop fires into a system already past the point of easy correction.
Worked example · the feature factory
Every mode in the chain is invisible from inside the paradigm that created it.
Paradigm lock (feature factory) → starves an information channel →
info gap (research off the roadmap) → missing signal lets a loop run →
reinforcing runaway (complexity compounds) → drains capacity →
buffer exhaustion (eng capacity gone) → collapses as a lagged spike →
delay oscillation (reorg 18 months too late) → correcting loop fires →
balancing failure (too weak, too late)
Stand at any node. Name what's upstream. That's the next incident before it surfaces.
One symptom, many depths
"Platform adoption has stalled."
The model changes what the team can imagine.
| Change the adoption target | Parameter · 12 |
| Add enablement capacity | Buffer · 11 |
| Improve onboarding flow | Stock / flow · 10 |
| Expose abandonment signals | Information flow · 06 |
| Change contribution rules | Rules · 05 |
| Optimize for reduced cognitive load | Goal · 03 |
| Question centralized platform as the model | Paradigm · 02 |
Same symptom. Different model. Different leverage entirely.
Example
"AI quality is drifting."
A deeper intervention improves the system. Raising the eval threshold improves the gauge.
Surface move
Raise eval threshold
Add more test cases
Tune the prompt
Retrain on recent outputs
Model question
Are our instruments drifting with the model?
What user signal is missing?
Who can falsify the benchmark?
What goal is the system optimizing?
Deeper lever
Information flows
Rules for release
Goal of quality
Paradigm of evaluation
When instruments co-evolve with the thing they measure, the dashboard can stay green while reality gets worse.
Example
"The incident keeps coming back."
A postmortem that stops at the surfacing layer buys the recurrence.
→
→
Model
Retries amplify lag
→
→
Test
Throttle retry policy
→
The fix changes from "restart the consumer" to "change the loop that keeps recreating the same failure."
The ceremony
A repeatable practice for learning where the system can actually be changed.
Name
What is the system doing?
Model
What structure produces it?
Locate
Which leverage point matters?
Test
What would prove us wrong?
Observe
Did behavior change?
Not a workshop. A way of working.
What changed with my teams
We stopped asking "Who owns the box?"
We started asking what behavior the system was producing, and what leverage point governed it.
Before
Who owns this service?
Which team missed the handoff?
Which tool should we replace?
What process should we add?
After
What is accumulating?
Which loop is amplifying it?
Which signal arrives too late?
Which leverage point are we pulling?
The separation
Good teams execute.
Amazing teams model together.
Good teams
execute the plan
Amazing teams
improve the model until the right action becomes visible
The modeling conversation is the work. Coordinated action follows from it.
YOU CANNOT PLAN
A SYSTEM YOU
CANNOT MODEL.
You cannot change a system until you find where the leverage lives.
Name · Model · Locate · Test · Act · Observe · Update