https://therepository.org/forense/Why engineered systems fail, told through the investigation report — the mechanism, drawn as a blueprint.enhttps://therepository.org/forense/ep12-the-dc-10-memo-that-predicted-the-crash-and-vanished/https://therepository.org/forense/ep12-the-dc-10-memo-that-predicted-the-crash-and-vanished/Tue, 08 Sep 2026 02:45:35 +0000The story everyone tells about the DC-10's cargo doors is a lone whistleblower, ignored by a cold company. That memo is real. But the engineer who wrote it wasn't the first person at his company to know — and the reason his warning went nowhere wasn't disbelief. On paper, it simply wasn't his job to tell anyone else.https://therepository.org/forense/ep11-three-mile-island-s-warning-was-written-four-times-then-filed/https://therepository.org/forense/ep11-three-mile-island-s-warning-was-written-four-times-then-filed/Fri, 04 Sep 2026 05:00:00 +0000Everyone who tells the Three Mile Island story tells the same second half: an inspector warned two federal regulators days before the accident, and it was too late. That's true — and, per the government's own investigation into itself, almost beside the point. The document that actually predicted the failure, fourteen months earlier, never got near a regulator. It died somewhere far more ordinary.https://therepository.org/forense/ep10-three-mile-island-didn-t-fail-from-a-stuck-valve-it-failed-from-a-ligh/https://therepository.org/forense/ep10-three-mile-island-didn-t-fail-from-a-stuck-valve-it-failed-from-a-ligh/Wed, 02 Sep 2026 02:43:24 +0000Three Mile Island is remembered as a stuck valve and operators who got it wrong. The Kemeny Commission's own account says something narrower: the control room had no way to know the valve was open, because the panel light was never wired to the valve at all — only to the command sent to close it. And the exact failure mode that fooled them had already happened once, at another reactor of the same design, eighteen months earlier.https://therepository.org/forense/ep09-the-challenger-o-ring-didn-t-crack-in-the-cold-it-was-simply-too-slow/https://therepository.org/forense/ep09-the-challenger-o-ring-didn-t-crack-in-the-cold-it-was-simply-too-slow/Fri, 28 Aug 2026 10:46:13 +0000The story everyone already knows gets most of it right — cold, an O-ring, engineers who warned, managers who launched anyway. This episode corrects the one detail most retellings get wrong: the O-ring didn't crack. The joint opens by design on every launch, and cold didn't make the rubber brittle — it made it too slow to chase a gap it was always supposed to follow. The deeper cause predates the launch by three years: a 1982 safety reclassification the internal paperwork never fully caught up wihttps://therepository.org/forense/ep08-the-silver-bridge-didn-t-fail-from-corrosion-it-failed-from-a-crack-no/https://therepository.org/forense/ep08-the-silver-bridge-didn-t-fail-from-corrosion-it-failed-from-a-crack-no/Wed, 26 Aug 2026 19:38:04 +0000Every bridge in this series failed because a control that existed on paper was never run — a calculation nobody made, a check nobody performed. This one is different. The National Transportation Safety Board's final report says the flaw that brought this bridge down could not have been found, by any inspection method known at the time, without taking the joint apart. If the defect was genuinely invisible, what was left to investigate? The answer is a five-factor convergence, a sixth factor that https://therepository.org/forense/ep07-the-i-35w-bridge-did-not-fail-from-neglect-it-failed-from-a-calculatio/https://therepository.org/forense/ep07-the-i-35w-bridge-did-not-fail-from-neglect-it-failed-from-a-calculatio/Sun, 23 Aug 2026 17:46:15 +0000Within days, this became the story of American infrastructure: an old bridge, decades of deferred maintenance, a country that had stopped taking care of its roads. The National Transportation Safety Board considered that story directly and ruled it out — corrosion, cracking, temperature, pier movement, all excluded as causes. The real cause was signed off in 1965: three families of steel gusset plates, sized by a calculation method that worked everywhere else on the bridge, and simply never extehttps://therepository.org/forense/ep06-the-hyatt-regency-walkways-were-never-safe-not-even-before-the-change/https://therepository.org/forense/ep06-the-hyatt-regency-walkways-were-never-safe-not-even-before-the-change/Fri, 21 Aug 2026 23:11:15 +0000The sentence everyone knows is true: a fabricator changed one continuous rod into two and doubled the load on a connection nobody recalculated. Here is what it leaves out. The National Bureau of Standards calculated both versions of that connection against the same building code — the one that was built, and the one that never was. The version nobody touched only carried sixty percent of the minimum the code required.https://therepository.org/forense/ep05-the-2003-blackout-was-not-caused-by-a-software-bug/https://therepository.org/forense/ep05-the-2003-blackout-was-not-caused-by-a-software-bug/Thu, 20 Aug 2026 21:31:52 +0000Two sentences carry this case: a tree in Ohio, and a software bug. Both are true, and neither is the cause. The final report of the U.S.-Canada Power System Outage Task Force names four groups of causes, and the software is not one of them. At 16:05:57 EDT a transmission line in northern Ohio took itself out of service because its protective relay had seen a short circuit. There was no short circuit. Seven minutes later fifty million people were dark — and essentially nothing in that sequence hahttps://therepository.org/forense/ep04-the-apollo-13-oxygen-tank-did-not-explode/https://therepository.org/forense/ep04-the-apollo-13-oxygen-tank-did-not-explode/Wed, 19 Aug 2026 22:25:11 +0000Everyone knows the sentence: an oxygen tank exploded. The Apollo 13 Review Board's own numbers say something else. The pressure in that tank rose from 887 to 1,008 psi, against a burst pressure of 2,200, and the flame crawled along the wiring at about a quarter of an inch per second. It was a slow fire in a sealed sphere — and the damage that made it possible was done fifteen days before launch, on the ground, with nobody aboard.https://therepository.org/forense/ep03-the-millennium-bridge-wobble-was-never-about-people-walking-in-step/https://therepository.org/forense/ep03-the-millennium-bridge-wobble-was-never-about-people-walking-in-step/Tue, 18 Aug 2026 21:41:28 +0000London's Millennium Bridge opened on 10 June 2000, swayed sideways by around 70 mm under the crowd, and closed two days later for twenty months. The famous explanation is that pedestrians fell into step with each other and with the deck. The engineers' own measurements say something narrower and stranger: the force the crowd fed into the bridge followed the deck's velocity, not its position — which is damping with the sign reversed.https://therepository.org/forense/ep02-the-skyscraper-that-was-secretly-rebuilt-at-night/https://therepository.org/forense/ep02-the-skyscraper-that-was-secretly-rebuilt-at-night/Tue, 18 Aug 2026 07:00:06 +0000A 59-storey tower in midtown Manhattan stands on four columns placed at the middle of each side, not at the corners, because a church owned the corner and would not sell. The building never failed. Its own engineer worked out, a year after it opened, that a strong enough wind from the wrong direction would tear it apart — and the repair was welded at night, behind the walls, while the offices stayed open.https://therepository.org/forense/ep01-the-tacoma-narrows-bridge-did-not-fail-from-resonance/https://therepository.org/forense/ep01-the-tacoma-narrows-bridge-did-not-fail-from-resonance/Mon, 17 Aug 2026 21:08:47 +0000Almost every physics textbook that shows you the Tacoma Narrows film calls it resonance. The three engineers who investigated the collapse wrote the opposite, and they wrote it down in 1941. Here is what the report actually says, and the decision — made years earlier, by people doing their jobs correctly — that made the failure available at all.