EVENT
Chernobyl
The 1986 Soviet nuclear catastrophe — caused not by the reactor but by the safety test intended to verify the reactor's protective mechanisms — and the paradigmatic example of the safety system itself as the risk.
On April 26, 1986, operators at the Chernobyl Number Four reactor were conducting a safety test designed to verify that the turbines could generate enough residual power during shutdown to keep coolant pumps running until emergency diesel generators reached full capacity. Following the protocol, the operators disabled several automatic shutdown systems that would have interfered with the test's measurements. They reduced reactor power to a level that made it unstable, then attempted to raise the power, producing a sudden uncontrollable surge. The safety systems that would have contained the surge had been disabled — by the safety test. Thirty-one died directly; subsequent radiation exposure contributed to thousands of additional deaths; the exclusion zone remains uninhabitable forty years later.
In The You On AI Field Guide
Perrow treated Chernobyl not as an aberration but as the purest illustration of a general principle: safety systems are themselves systems, subject to the same dynamics of interactive complexity and tight coupling that produce normal