Argyris's key insight was that defensive routines are skilled activities. The people who deploy them are not failing to think; they are thinking expertly within a frame that makes the protective behavior seem obviously correct. This is why the routines are so difficult to interrupt: the person deploying them experiences any attempt at disruption as an attack on their competence, which triggers further defensive activity.
The AI discourse is saturated with defensive routines. The senior developer who insists AI-generated code is fundamentally inferior, despite mounting evidence to the contrary, is not lying. She is deploying a routine that protects her governing variables. The executive who mandates AI adoption while structurally penalizing the learning time it requires is deploying the organizational equivalent: espousing transformation while maintaining the metrics that prevent it.
The most sophisticated defensive routine in the AI transition is what Argyris called bypass with cover-up: discussing the technology endlessly while avoiding the specific questions that would force examination of governing variables. Conference keynotes about "AI readiness" that never mention what readiness actually demands of the individual's identity are a canonical instance.
Breaking defensive routines requires what Argyris called Model II behavior: the willingness to make one's reasoning public, test assumptions openly, and treat embarrassment as information rather than threat. The difficulty is that defensive routines specifically punish the people who attempt Model II moves, which is why Argyris described them as self-sealing.
The concept emerged from Argyris's four-decade ethnographic work with senior management teams. He observed a consistent pattern: organizations that claimed to value open discussion produced meetings in which nothing consequential could actually be said, and the members of those meetings were uniformly unable to see that this was happening.
Defensive routines, Argyris argued, were not character defects in individuals but emergent properties of organizations. They were learned, rewarded, and transmitted across generations of professionals, who acquired them as part of what it meant to be competent.
Skilled, not failed. Defensive routines are expert performances, not cognitive failures. The people who deploy them are thinking well within a frame that makes protection from learning seem like prudent behavior.
Self-sealing. The routines punish attempts to discuss them openly. Asking "why are we not talking about X?" is itself treated as a violation of the norms the routines enforce, triggering more protective activity.
Organizational and individual. Routines operate at both levels simultaneously. An individual's defensive move is reinforced by organizational norms that reward it, and the organization's routines are sustained by individuals who cannot afford to challenge them.
The AI test. The AI transition exposes defensive routines with unusual clarity because the pace of change makes the usual protective moves — delay, reframing, selective attention — increasingly expensive. Organizations that cannot dismantle their routines pay a compounding cost.