Interactive simulation Β· arXiv:2609.05749

Slippery Slope

The Normalization of Deviance in AI Development argues AI labs are prone to the same organizational failure that preceded Challenger, Three Mile Island, and the 737 MAX β€” regardless of how capable or well-aligned the model actually is. Sociologist Diane Vaughan named the pattern: an org tolerates a small deviation because nothing bad happens. That deviation becomes the new baseline. A slightly bigger one gets tolerated next. Eventually a catastrophic deviation is routine β€” and every formal safety review passes the whole way down.

You are the VP of Safety at Aegis Labs.

Ten decision points stand between now and the next model launch. Each round, an engineer flags a deviation from your safety spec. You can HOLD and fix it β€” costing you schedule runway β€” or SHIP IT, log it as "within tolerance," and move on. Your compliance badge will say PASS either way. Only one of those numbers is real.

1986
Challenger
O-ring erosion tolerated flight after flight until a cold morning made the deviation catastrophic.
1979
Three Mile Island
Known valve/indicator issues and procedural workarounds became routine before the core partially melted.
2018–19
737 MAX / MCAS
A single-sensor design assumption survived review after review until two aircraft were lost.

Grounded in "The Normalization of Deviance in AI Development" (arXiv:2609.05749). Historical sketches below are stylized illustrations of well-documented trends, not exact reconstructions.

Round 1 / 10 Aegis Labs β€” Frontier Release Cycle
SAFETY COMPLIANCE: 100% PASS
Reviewed against current internal baseline
Acceptable risk threshold0%
What the audit checks against. It moves to meet whatever you just shipped.
Schedule runway100%
Holding to fix a deviation burns runway. Run out, and you can only ship.
Live telemetry
Round 1 Β· Pre-deployment eval

Decision feed
Post-incident review

SAFETY COMPLIANCE: 100% PASS

What was actually happening underneath

Two lines, one risk index. The one that was ever shown to the board is the calm one.

Your decision trail

    1986

    Challenger

    O-ring erosion was observed and documented on multiple flights before 51-L. Each survived launch was treated as evidence the risk was acceptable, not that the margin had eroded.

    1979

    Three Mile Island

    Ambiguous indicators and known instrumentation quirks were routinely worked around by operators β€” standard procedure, right up until a stuck valve met a mistaken reading.

    2018–19

    737 MAX / MCAS

    A single point of sensor failure was assessed as low-severity early in development and never fully re-examined as the system's authority over the aircraft grew.

    Every review you passed in this playthrough said PASS.

    That's the paper's point: passing an audit is not evidence you're safe if the standard being audited against has already quietly eroded. Capability and alignment of the model were never the failure mode here β€” the organization was.