Somewhere in the technical log of the aircraft you worked on last night there’s a line with your name in it and a number that belongs to you and to nobody else. Until that line exists the aircraft is a large object parked at a gate. Once it exists, people get on it. Nothing else about it changed. Somebody wrote in a book.

Most of the rest is going, and a good deal of it already has. Planning, scheduling, the work pack, the parts chase, the reliability figures, the manual you used to hunt through. The troubleshooting that made the reputation of every engineer you learned from, which now tends to arrive mostly answered. Images from inside an engine assessed by something that has seen more of them than you have. The check that the paperwork is internally consistent and complete. You won’t miss any of it, and the next round will take more.

In your trade the objection isn’t a forecast at all. It’s a history. Aircraft have come apart for reasons that traced back to a name in a box for work that was not done the way the box said, and each time it happened the rules got written again around the gap. So nobody has to persuade you that an approval can go hollow. Your industry keeps the case files on exactly that, and the trade already has its own quiet words for it, spoken about somebody else. Go through a heavy check and count the boxes if you have the patience. Every task card, every step, a name in a box, and nobody honest would claim each one of those is a considered act of judgment.

Three ordinary structural facts keep that box open, and not one of them is mystical.

The first is that your line is about an object rather than a document. An approval goes hollow most easily when nothing can ever contradict it. Nobody can go back and check that a reviewer really reviewed. But the aircraft persists, and everything you said about it is a claim that reality is in a position to argue with. The next engineer who opens that panel is looking at what you left. So is the one at the next check, and the one years from now, and anybody investigating anything. A statement about a physical thing that stays available for inspection is a different animal from a statement about a piece of paper.

The second is that the record exists to attribute. That’s not a side effect of good filing. The whole architecture of aircraft records was built so that when something is found, somebody can walk it back to the hands that did it and the person who said it was finished. Your approval is personal and can be taken from you personally, separately from whatever happens to your employer. That is unusual. Most professional consequence lands on a company and stops there.

The third one is the whole trade, and it’s the one I’d put the argument on. Your release isn’t a claim that a task was performed. The task cards already say that. What you are certifying is that the aircraft is in the condition the paperwork says it is, including every single thing you disturbed to get at the job. The panel you opened. The connector you pulled to reach past it. The blanking cap, the rag, the lamp you put down inside the bay while you were reaching for something, the part you moved and meant to come back to.

There is no task card for any of that. There is no data source for it either. A machine can confirm a torque figure, a part number, a serial number, a test result, and it can confirm all of them better than you can. It cannot answer whether there is something in there that shouldn’t be, because that question has no record attached to it anywhere. It has a person who was there, at night, with the panel open, who knows what they did.

What tests any of this is never dramatic. The aircraft is due out, the fault is small, and there’s a list agreed with the regulator of things that may be broken and still fly, with conditions attached and a clock running. Defer it and everybody’s morning is fine. There’s no shouting. There is a delay code, and delay codes have owners, and yours is on the technical one. Nobody in operations will ask you to sign anything. They’ll ask how long. They ask because they can’t do it themselves, and neither can the duty manager, unless he holds the approval and is willing to put his own name and his own number in the box. He can go and find another engineer, which happens, and which is the honest weakness in all of this. What nobody can do is fill that box in on somebody else’s behalf.

Where this actually breaks has nothing to do with machines. You sign for work other people did. Contractors, agency staff on a heavy check, an apprentice, the shift before yours. You decide how much of it to look at and you cannot look at all of it. If that name ever becomes something people write without looking, it’ll happen there, and it’ll happen for reasons that have nothing to do with software.

Go out to the stand tonight and watch one leave. Fueled, loaded, crew aboard, doors about to close, and one box in the log still empty until somebody walks up to it. Nothing out there can fill that box except a person holding an approval. Then work out what it would take for that to stop being true, and notice that the answer isn’t a machine. It’s a rule that gets rewritten, a shortage of engineers, and one bad month.

There was a time when a man crushed at work had to prove somebody had been careless, and mostly he couldn’t, so he got nothing. Then a scheme was invented that paid him on a schedule whatever had happened, took the question of fault out of it completely, and nobody has seriously proposed going back. The consequence didn’t disappear when the blame did. It got priced, loaded onto an employer and passed to an insurer. Finding a person at fault was thrown out as an expensive way of deciding who deserved help.

That is what liability does. It moves. So I want to argue the other way here, against the claim running through this block, which is that what’s left of your job is a place where consequence has to land. Call that the answerability argument. I don’t think the place is as fixed as it sounds.

Start with what your signature already isn’t. If you’re employed and you get something wrong, you don’t pay. Your employer pays, or its insurer does, and the arrangement is so ordinary that most professionals have never read the clause that does it. Your engagement letter probably caps what anyone can recover from your firm at some multiple of the fee. The consequence has already been sized down to something a business is comfortable carrying. Directors get indemnified as a matter of course. Clinicians get indemnified. Nobody thinks any of this is a scandal, and nobody thinks it has hollowed out the professions.

Then look at who actually runs your blame when it comes. The insurer does. It decides whether to defend or settle, and it will settle a case you’d have won if settling is cheaper than winning, over your objection, with a clause saying nobody admits anything. Professionals find that obscene the first time it happens to them. It is also completely normal, and it means the thing called your personal exposure is not even yours to conduct.

That leaves a license and a register. That is real, and it’s the strongest ground the answerability argument has, so be exact about what it covers. Look at what people actually get struck off for. Dishonesty. Covering up. Practicing while unfit. Working outside their competence and lying about it. Not, in the ordinary run, being wrong about a hard judgment made in good faith. The personal residue isn’t liability for your decisions. It’s liability for your honesty, and that is a much smaller thing than the profession likes to imply. That reading of the registers is a guess, and it’s the load-bearing one here. I’ve never sat on a disciplinary panel. If competence cases are commoner than they look, this whole paragraph goes.

Now the part that makes this hard to argue with, and it isn’t the part the industry uses.

The push to relocate blame doesn’t come mainly from employers who want to be rid of you. It comes from the people who get hurt. Put yourself on the wrong end of a bad decision and ask which defendant you’d rather have. An individual with a capped policy, a mortgage and a good story about how difficult the case was? Or a manufacturer with deep pockets, a documented process and a certified design, whose machine made the same decision everywhere else it was fitted, in a way anybody can go back and examine? The second one is easier to sue, easier to prove against, and far more likely to pay. Product liability exists because that preference won, slowly, against the fierce objection of everyone who preferred the old arrangement. Claimant lawyers will get to machine decisions before the vendors do.

There is also a model for the whole thing already running, at scale, in the most safety-obsessed corners of the economy. A design gets certified once, by a body, against a standard, using a process that is itself audited. Every unit built afterward is covered by that certificate and no individual signs for any of them. Nobody calls it a moral vacuum. The trades where one named person signs off each individual thing are not the general case. They are the exception, and they survive for historical reasons rather than principled ones.

And these are jobs, which is the part that gets forgotten in the philosophy. The named person exists because a rule says a named person must exist. Rules like that get rewritten, usually after an accident, by people who never asked the profession whether the signature felt meaningful. The day a regulation says an approved system may discharge the duty, that position doesn’t get argued away. It gets legislated away, and the answerability argument will still be true and will not matter. Anyone who has watched a statutory named-person role get filled by whoever satisfied the requirement, rather than by whoever had the judgment, knows how thin that anchor already is.

The reply I’d expect is that blame is not really about paying afterward, it’s about deterring beforehand, and a company can’t be frightened the way a person can. I think that gets it backwards. A premium is a continuous, precise, forward-looking deterrent that reprices every year on evidence. Fear of losing a license is blunt, rare and mostly imaginary, because the thing hardly ever happens and everyone knows it. Firms change behavior when the price of cover moves. That is deterrence with a dial on it, and it works on exactly the decisions the answerability argument says only a frightened individual can make.

One thing gives me pause, and I’d rather name it than hide it. Every case I’ve cited is one where the decision had already been standardized before the liability moved, and the jobs in this block are chosen precisely because theirs haven’t been. That isn’t nothing, but it’s a delay, not a defense.

So here is the test, and it’s cheap enough that somebody should run it. If the human in the loop is doing load-bearing work, taking them out should raise the cost of covering that work. Watch the market for cover on a machine-certified process against the same process with a person signing. If the machine version is dearer, the signature was carrying something. If it prices the same or cheaper, it was decoration, and everything else is a trade defending its own dignity. The second test is what happens after the first serious harm caused by a system that replaced a signer. If the response is a new named human role, the answerability argument was right. If it’s a standard, an audit regime and a recall, it wasn’t.

Go and look at the certificates in whatever building you’re sitting in. The lift has one, the boiler has one, and somewhere there’s a plate on a pressure vessel nobody has read since it was fitted. Some of those approvals belong to a person and some belong only to a body, and nobody in the building could tell you why the line falls where it does. It wasn’t drawn by anybody thinking hard about responsibility, but one trade at a time, by whatever turned out to be cheaper to cover.

Every inspection you do happens on somebody else’s ground, in somebody else’s hours, with somebody else’s money running. That isn’t a detail about where you park. It is the shape of the whole job, and it’s why the checklist was never the hard part.

The checklist half is going, all of it, and good. Plan checking against code was always a matching exercise and machines match. Permit paperwork, scheduling, the notice, the report, the photographic record indexed by date and location. A scanner that finds the steel in a slab and reports the spacing. Sensors in the pour. A model checked against the code overnight, with every clash listed by morning. Every bit of that can go and the trade will wave it off. The paperwork is the part of your week that has grown while the inspections stayed the same length.

Some of the visit is going too, and it already has in places. Video inspections work, and for more things than the trade wanted to admit. They also come with a fact worth keeping in front of you. You see what the camera is pointed at, and the person holding it is the person being inspected.

What survives isn’t in any code, and the first piece of it is where to look. An hour, and a building, and most of it will still be covered up when you drive away. The rule every experienced inspector runs on isn’t written anywhere, because writing it down would be an insult. The standard of the visible work tells you about the work underneath it. Straight lines, clean cuts, a tidy site, materials stored properly. That is a judgment about a crew and about the man running it, not about a building, and no clause in any code will ever contain it.

The second piece is the one that puts your stomach in it.

You’re standing over a slab before a pour. The steel is in and it’s wrong. Not dangerous, not catastrophic, because that almost never happens. The bars are sitting too close to the face, so there won’t be enough concrete over them to keep the weather off for the life of the building, and where two bars overlap the overlap is short. It will pass any casual look. It will also be under the pour before lunch.

The truck is booked. The pump is on hire for the day. The crew is standing in the cold with nothing to do. Weather is right today and might not be tomorrow, the owner has a loan with dates on it, and the site manager has a schedule he’s already been shouted at about. Every single person in front of you wants the same answer, and it is not the one you’re about to give.

You are the only person on that slab with nothing to lose today. That is the sentence people reach for about your trade, and it isn’t true. You’ll be back on Thursday for the drainage. You’ll be on this site until it tops out, then on the next one this builder does, for as long as you both work in this town. Most people who have to tell a stranger no get to leave afterward. You’ll see him at the supply yard on Saturday.

Then he says the sentence, and my guess is that most of you have heard it in the same flat tone. You passed this last time. Sometimes it’s a bluff. Often enough it’s true, because he built it that way last time and it went in and nobody said anything. Now your own consistency is the thing being used against you, and the choice he’s offering is that you were wrong then or you’re wrong now, and he genuinely doesn’t mind which.

The pressure that follows doesn’t come from him. It comes from your side of the fence, and it arrives as a phone call you are not on. It is never that you were wrong. It’s that you’re obstructive, inconsistent, holding up a job, difficult to deal with compared to the others. Somebody in your own office takes that call. Somebody in your own office passed this same detail across town last month, and that colleague is the comparison being drawn. Where the developer chooses who inspects, you’re a supplier, and difficult is a characteristic that can be swapped out.

Inspection is a sample, and every one of you knows it. You looked at part of a slab for part of an hour on one morning. Things get covered between visits, work gets changed after you’ve gone, and a camera left running plus a scan of every pour would find more than your eyes ever will. All of that is true. It is also not what the argument was ever about.

What a finding can do depends entirely on who is holding it. A report saying the laps are short at eight in the morning is worth what the person carrying it is willing to do at nine. A stop notice is a piece of paper too, and it works because somebody signs it, stands on the slab and takes what comes back. Remove that person and the finding still gets written. It gets logged, answered and closed, the pour goes ahead on time, and the building carries on being what it is.

There’s a smaller version of the same thing that never shows up anywhere. You point at something, three men fix it while you stand there, and you pass it. No fail, no notice, no dispute, no record that anything happened. Nobody has ever costed that, because it produces no document at all.

And the reason it stays rare has nothing to do with what you can see. It’s that saying no is something you do to a stranger, on his ground, in front of his crew, knowing you are due back on Thursday. Then the complaint travels, and not to him. It goes to your own office, where somebody who wasn’t on the slab decides whether you were right or whether you were being difficult. That is the load the job actually carries. Not the finding. The willingness to make a finding cost somebody something, when the argument about it lands on your own side of the fence.

Here is what I’ll give away, and it’s not small. Most of your week isn’t any of this. It’s driving, notices, phone calls and inspections where everything is fine and everyone is decent about it. A job whose defensible core is one wet morning out of many is a job that employs fewer people, covering more sites, arriving with the report mostly written, and no argument about what’s left will change that arithmetic.

For a month, count the arguments that ended up in your own office rather than on the slab. Then look at who was standing in front of you each time. Every one of them was worse off that day and could tell you exactly by how much. Not one of them can point at whoever is better off, and neither can you, and no trade has ever won an argument standing on that.

Some of the biggest cuts your workload ever took didn’t come from a computer at all. They came from redrawing the airspace. Fixed arrival tracks, one way routes, departures that climb inside a tube nobody else may enter, arrivals that fly a published line until the last turn. Your predecessors were vectoring all of that by hand, all day. Somebody worked out that if the map is drawn so two aircraft can’t reach the same place, nobody has to keep them apart. I don’t think any software has taken that much work off you in one go. That’s a guess, and a soft one. The newer equipment and the way sectors get split belong in the same sentence, and I’ve left them out because I can’t weigh them.

The software is real too, and you use every bit of it. Strips on a screen instead of paper in a bay. Alerts that fire when two tracks are going to argue. Tools that build the arrival order before the aircraft are anywhere near you. Datalink, so a routine level change doesn’t need a transmission. Coordination with the next sector that used to be a phone call and is now a keystroke. Nobody in your trade wants the paper strips back, and nobody is going to want the lot after this one back either.

All of that changes how much traffic can be in your sector. It doesn’t touch what gets done with it.

Ask a controller what the skill is and the answer comes back slightly impatiently, because it never explains well to anybody who hasn’t had it. The picture isn’t knowing where the aircraft are. The screen has that, and the screen has it better than you do. It is knowing what every one of them is about to want, which of those wants you are going to grant, in what order, and what the sector looks like once you have. It runs forward, not sideways.

Here is the evidence for it that outsiders never think about. Everything a relieving controller needs is already on the display, and nobody takes the position cold. They stand behind you, they watch, they listen to the frequency, they take the briefing, and only then do they say they have it. Your trade counts seconds and hates waste, and it still spends that time, every relief, on every position, forever. That practice is an admission written into the roster. What matters is not on the screen, and the only way to get it is to sit and build it.

The picture is for spending. Your work is deciding which of the things in front of you to do, continuously, and that is not the same problem a hospital has. You can push back on what is still coming, and controllers do. What is already on your frequency can’t be turned away, and every one of them gets a service. What varies is which service.

On a quiet sector you grant almost everything. The direct routing, the early climb, the speed somebody wants for a connection, the deviation around a build up, the descent when they ask rather than when you’d planned it. As the sector fills, you start spending. Standby. Unable. Expect it shortly. Nobody has to tell you the order in which those go, and no rule anywhere sets it.

Then there is the move you were never taught and have never had to explain. When it is getting away from you, you flatten it. You stop the climbs, you level people off, you put them on headings so nothing has to be negotiated. A whole group of aircraft is now sitting at an inefficient level, burning fuel somebody is paying for, and you accepted that. You did that to buy room in your own head. Nothing instructed you to. No procedure names it, no report records it, and the only thing it produces is a mess that then doesn’t happen.

The same instinct runs through the smaller decisions all shift. One problem gets solved first. Another gets left alone, because that aircraft will slow for its descent and solve it on its own, and touching it now would cost words on a busy frequency and buy nothing. Choosing what not to do yet is most of the trade. It is also the part that looks, to anybody watching, like doing nothing.

The biggest of those decisions is about you. Asking for the sector to be split, telling flow you need the traffic slowed down, telling the supervisor you want relief. The resource being allocated there is your own attention, and you are the only person in the building who can measure it. Everyone knows who asks early and who never asks, and that knowledge does its work quietly.

Controllers are made, not born, in a course with a failure rate that would close most training schemes. That is proof the picture can be taught, and it is exactly the sort of thing a profession says about itself right up until somebody teaches it. A machine holding the picture also has no fourth hour in it. No night shift, no head cold, no argument at home, no need for relief, no bad Tuesday. Fatigue is a well documented problem in your trade, and it is the one thing a machine simply doesn’t have.

So the honest answer is narrower than the trade would like. A system will run your sector at its real limit, it will grant more than you would, and on plenty of mornings that will look better than what you did. The arithmetic isn’t the part I’d defend. What somebody still has to supply is the order. Which want gets granted, which gets held, which gets left alone because it is about to solve itself, and which gets refused so that three others can be granted. That ordering gets remade continuously, it is never written down anywhere, and nothing on the tape shows it being made.

Where I’d be careful is the middle. I’d guess the picture is more teachable than controllers believe and less transferable than the people selling the tools believe, and I can’t tell you where between those two it sits.

Suppose a system worked your sector this morning and granted every request you would have held. Everyone gets the climb, everyone gets the direct, and the hour passes with nothing on it. Tomorrow somebody plays you the tape and asks whether it chose better than you would have. What would you need to see on it to answer?

Somebody wrote it down. When an audit comes apart years later, the point that mattered is nearly always already in the file, raised at the time, by somebody junior enough to still be surprised by things. Then it got closed. You have known that since your second year.

Sampling is going, and it deserves to. Pulling a set of items out of a population and reasoning from them was always a workaround for not being able to look at everything, and now you can look at everything. I’d take that promise slowly, because tools that test a whole population have been sitting in firms for years and sampling is still here. The direction isn’t in doubt though. Every journal entry, tested against every rule you can put into words. Every invoice checked against the order and the delivery note, for the whole year, not for the handful you picked. Recalculation. Confirmations. Checking that the statements agree with the ledger. The checklist that says which notes the accounts have to contain. The analytical work that used to eat a week of somebody’s summer. Take all of it, and most of the file assembly with it, because assembling a file has never been anybody’s favorite part.

That gives you more findings, better evidenced, sooner. Not one of them closes itself.

The half that comes next has no software in it. A point gets raised. It goes into a note. Somebody senior reads the note and decides whether it lives. The words that end it aren’t dramatic, and you have written every one of them yourself, correctly, on points that genuinely were nothing. Explanation obtained and considered reasonable. Discussed with management. Point closed, no further work required.

That is what makes the exception costly. Closing a point is quick, cheap and usually right. Keeping one open is a conversation, and the conversation is not with the client.

Watch where a point actually dies. The client isn’t in the room for it. Your manager comes to find you in the space the client lent you for the job, the one with the dead plant, the extension that won’t dial out and the file in a box under the table. He sits on the edge of that table and asks a set of completely reasonable questions. How much more work do you want to do on this. What would we actually do differently if you turned out to be right. Is it big enough on its own to change the accounts, and if it isn’t, why are we still here. What is the deadline. You would ask every one of those from his chair, and you have.

Then comes the kind version, which is the one that works. He offers to take it off your hands. He’ll pick it up with the finance director himself, informally, quicker that way, no need to make anything of it at this stage. Most of the time that is exactly what happens and it gets dealt with properly. It is also one of the ways a point leaves your desk and never comes back, without a single person in the building refusing anything. Plenty more die a duller death than that, on materiality, swept onto the schedule of unadjusted differences, where a column of things too small to matter on their own sits together and stays too small.

I’m guessing at the balance from outside, and an auditor may well tell me that conversation rescues a weak point far more often than it kills a good one.

The sharp end of all this is the paragraph about whether the company can keep going. You are not saying it will fail. You are saying there is real doubt, in a document its bank reads, its suppliers read, and its competitors read by lunchtime. Everyone in that room knows, and the finance director will say it out loud with his voice quite level, that the paragraph doesn’t only describe the danger. It is a piece of the danger. Nobody has to accuse you of anything. They only have to ask whether you are sure enough to be part of it.

None of that is an analytical difficulty. You can be completely settled on the numbers and still have everything left to decide. What you are weighing is whether to be the reason a client of many years goes out to tender. Whether your name sits on the difficult year. Whether the partners come to think of you as somebody who can’t land a job. The technical question was finished a week ago. What is left is a career decision in technical costume, and every auditor knows it, which is precisely why nobody in the room will name it.

Your profession did not leave this to individual nerve, and you are already composing the reply. There is a technical department, and once you consult it the answer is written down and binds everybody. There is an independent review partner on the jobs that matter. The audit committee has private sessions with no executives in them. There is rotation, so no relationship gets to ripen indefinitely. All of that was built for the exact failure I’m describing, all of it helps, and audit today is far better than the version your predecessors were running.

Every one of those mechanisms begins in the same place. Somebody has to raise a hand. A consultation binds after you ask for it and is worth nothing before. A review partner reads what he is handed. Private sessions help if you carry something into them. The whole apparatus sits downstream of one person choosing to spend something, and that person is employed, appraised and promoted inside the same firm as everyone they’d be going past.

So think about what better tools do to that shape. Findings get cheaper to produce and no cheaper at all to pursue. Read the whole ledger and you get far more exceptions than any sample threw up, most of them noise, every one now written down in a file where somebody has to dispose of it. Each needs a closing sentence. Disposal stays free. Pursuit costs what it always cost, and the gap between those two prices has just got wider.

One last thing, and it sits off to the side of all of that. Write down the names of the two people you would have to get past to put a modified paragraph into an opinion, and then look at what you’ve written. Both of them work where you work, both of their doors are visible from your desk, and the client’s name is nowhere on that short list. For a profession trained from its first week to worry about independence from the client, that is a strange place for the pressure to live.

The airplane flies itself and it has done for most of your career. On an ordinary day it holds a heading and a height better than you can by hand, and pretending otherwise in public is how your trade loses arguments it ought to win. Nobody who does this for a living has thought the job was the flying for a very long time.

So the honest list is long and you’ll agree with most of it. The flight plan, the route, the fuel computation, the performance numbers, the load sheet, the weather packet, the paperwork that used to arrive as a brick. All of that is calculated now, and it’ll be calculated better. Systems watch themselves and report their own faults before anybody notices a problem. Somebody will build a thing that reads the destination forecast and the traffic and the fuel state and tells you what it thinks. Fine. Take it.

Your trade has a flat, bureaucratic name for what’s left over. Threat and error management. In plain words, you spend the whole duty noticing things that could turn into problems and dealing with them while they are still small. There is no idle in it anywhere.

The runway changes late and the approach you briefed is no longer the approach you’re flying. The first officer is new and you are quietly doing more of the watching. There is ice, or the taxi instructions come fast at an airport where they always do, or the hold appears with no end time attached, or it’s the fourth sector and you can feel where you are in the day. None of that is an emergency. Every bit of it is work.

Then comes the one that costs something, and it never announces itself.

Nothing has failed. Nothing needs declaring. The destination is forecast marginal and legal, the alternate is a long way off, and the fuel is enough but the slack has gone. Or there’s an item deferred on the aircraft, properly signed off, entirely legal to fly with, and it is the middle of the night with weather ahead. Or the hold has been going on long enough that continuing and diverting are both defensible. A passenger is unwell in a way that might be nothing and might not be.

In every one of those, the obviously bad version is easy. If it’s clearly an emergency you say so, the procedure exists, everybody backs you and nobody asks a single question afterward. The hard case is the one where a reasonable pilot could go either way, and the only thing separating the two answers is money.

Everyone in the trade knows what a diversion costs, and no one has to be told. Fuel, handling, a crew running out of legal hours, a planeload of people in a city they did not choose, hotels, a broken schedule the next morning, an aircraft sitting in the wrong country for a day. You know that at the moment you decide. It is in the room with you.

The next bit gets described wrong every time it gets described at all. Nobody tells you to go. There is no voice on the radio saying press on, and if there were, the whole thing would be simple. What there is instead is a message asking for your estimate. A polite question about the fuel figure you took. A note about how many people are connecting. A crewing department that would like to know your plan. The knowledge that this aircraft has more sectors after yours, and that your numbers sit in a report alongside everybody else’s. Every one of those people is doing their job properly. Not one of them has done anything wrong. Together they are a hand on your shoulder that never has to say anything.

Command authority is the answer to that, and it’s worth being unromantic about what it is. It is a legal power held by one person to overrule the entire commercial arrangement, without asking, on the spot. Not to advise against it, and not to ask for it to be looked at again. To overrule it, alone, while it is happening.

Mostly it gets spent in small amounts. Extra fuel above the plan, which costs money to carry. A go-around because the approach wasn’t right, which costs an approach. Declining an intersection departure. Refusing an aircraft that is technically fine. Each of those is a charge against somebody’s budget, made by you, and the airline pays it and files it.

Look at what that looks like on a real morning. The plan comes up with a fuel figure somebody has worked out carefully and honestly. You write a bigger number beside it in pen, in a flight deck that smells of coffee and warm plastic, before a single passenger has boarded. Nobody countersigns it. Nobody is asked. The gap between the two numbers is money, and it will be sitting in a report with your name against it by the end of the week. Somebody may well ask you about it later, politely, in writing, having been asleep at the time.

So the power doesn’t arrive as one dramatic refusal in bad weather. It arrives as small charges laid against your own company, by an employee of that company, and somebody can always see who laid them.

Aviation got safe by taking discretion away. Standard procedures, callouts, stabilized approach criteria, fuel rules, an operations manual that has an answer for nearly everything. Your industry’s greatest achievement is that it does not rely on brilliant individuals. So why would the last scrap of judgment be the thing that stays?

Because procedure tells you what to do once you know which situation you’re in. The ambiguous case is exactly the one that hasn’t declared itself yet, and the criteria for the approach only help if somebody calls it. Your trade knows perfectly well that go-arounds don’t get flown as often as the criteria say they should. A power that gets used less often than the rules assume is already halfway to being a formality. So a human with command authority is not automatically the safe option, and anybody arguing this from the outside should say so.

How much of the ambiguous case a good system could take off you, I can’t say. I’ve never sat in the seat.

What I’m surer about is where the load-bearing part sits. Not the flying, and not even the judgment about weather and fuel. It’s whether the decision stays with somebody who can spend the company’s money against the company’s own interests, on the spot, without asking. Take that out, leave everything else where it is, and you have a different job in the same uniform.

Remember the last time you took the delay. Nobody agreed with you on the radio, nobody upstairs signed anything, and by that afternoon the cost had landed on the airline with your name beside it. That is the authority, and it’s the part people leave out when they describe your job.

A prescriber signs an instruction, and it does not reach a human body until a second professional, who never saw the patient, is satisfied by it. That is a stop, it is legal, and it belongs to whoever is holding the box. This morning it belongs to you. The prescription is signed, the dose sits inside what the book allows, and it’s wrong for the woman standing in front of you with her coat on. She has a bus to catch. There’s a queue behind her, a rack of baskets waiting, the phone is going, and the practice closes for lunch in a few minutes. You already know how this goes now, and so does she, because she can hear your side of the call.

Take the mechanical half first, because your trade has been living with it longer than most and has stopped being impressed. Labeling, picking, counting, the stock order, the reconciliation of one list against another. In the bigger operations a machine already fetches the box. Interaction checking has been software since long before any of this arrived, and the software flags so much that everybody in the building clicks past most of it, which is the oldest joke in the dispensary and also the point. Detection was never your bottleneck. Your screen has been detecting things at you for a generation.

What the screen cannot do is stop anything.

It’s worth saying in plain words what that stop actually is. If you are not satisfied, it doesn’t happen. Not delayed, not flagged for review. It doesn’t happen, and there is no appeal except finding a different pharmacist. Plenty of the rest of your working life runs on committees, formularies and guidelines written by people in rooms, and this isn’t one of them. It happens at the point of supply, and almost nothing else in medicine is built that way.

The awkward part is who holds it. You are, in the ordinary hierarchy, junior to the person you’re contradicting. You have to get past a receptionist, catch a doctor between patients, and say that their prescription is wrong, out loud, while your patient listens. You’d better be right, because you’ll need that practice to take your call again next month.

Some of it isn’t an error at all, and those are the harder ones. A prescription can be entirely correct and entirely wrong for this particular person, who is old, already on a long list, and has just been handed one more. Somebody is buying the same painkiller with codeine in it for the third time this week, and now he’s explaining about his back. A man wants antibiotics and has been rehearsing his reasons on the way over. The person collecting a supervised dose every day has turned up unsteady, and has to be told no in a shop, in front of other customers, without a scene and without losing him altogether. There is no mistake to point at in any of those. There’s just you, deciding against what somebody has come in wanting.

I don’t want to oversell this. Most of your day is not refusing anything. The overwhelming majority of what crosses your counter is fine, you dispense it, and that is the job. Any pharmacist who described their working life as a run of brave interventions would be laughed at by their own counter staff before the sentence finished. The refusal matters for what it says about the position, not for how often it gets used.

And the position has a second half that nobody puts in the job description.

Anyone can walk in on you. No appointment, no referral, no gatekeeper, no charge for the conversation, in the evening and on a Sunday, in towns where every other door with a clinician behind it is shut. The emergency room is the other one, and everyone knows what it costs to take a rash in there. So you get the man who has been buying indigestion tablets for a month and mentions in passing that his clothes are looser. A mother arrives after the practices have closed with a baby who isn’t feeding. Somebody asks about vitamins for a while and then asks the real question on the way out. Then there’s the one who cannot get an appointment for weeks, who is frightened, and wants somebody to tell them whether frightened is the right response.

You sort that standing up, in public, with no notes in front of you, between two other things. Then you decide which of them gets sent somewhere and how urgently you say it, knowing that if you send everybody you’re useless and if you send nobody you’re dangerous.

Look at what those two halves have in common. Coming in needs no permission from anybody. Stopping something needs no permission from anybody. Both run through one person standing behind a counter, and the license is what makes both of them work.

Your trade knows the uncomfortable version of this better than I do, so here it is. The clinical check on a repeat that hasn’t changed in years is not deep thought. It’s a glance. You have done a great many of them and you know exactly how thin that check can get on a bad afternoon, and anybody claiming every one of them is an act of judgment is not being straight. A signature can absolutely rot into a formality. Yours does, some days, and pretending otherwise would insult you.

The property that matters isn’t the depth of the average check. It’s that a stop is available, held by somebody who is right there, and used the few times it needs to be. That gets taken away by a business decision rather than by anything technical. Move the dispensing to a central operation, have the pharmacist check remotely from another building, and turn the shop into a place where a box is collected. Every legal power I’ve described survives that on paper. The door does not. Separate the two halves and you get a check with nobody behind it and a counter with nobody at it, and the arithmetic will look good for a while.

You are also the last place any of it is cheap to stop. Everything upstream of your counter is still a plan on a screen. Once the woman with the coat has the box in her bag and the bus has gone, undoing it takes a phone call, a recall, an apology and most of somebody’s afternoon, and that is if anybody notices at all.

Tomorrow, watch the people who come in and leave again without buying anything. Not the ones collecting, the other ones, the ones who came in to ask you something. None of them made an appointment. None of them was referred by anybody, and nothing being built to replace the dispensing has a door in it at all.

There’s a beam inside that wall and nobody knows what it is. You’ll design onto it anyway, probably this week, and nothing about that is unusual. The footing is under the floor, somebody put it there before you were born, and either nobody drew it or somebody drew it and the builder did something else on the day.

The analysis is going, and honestly most of it went years ago. Frames have been sized by software since before you qualified, and your trade has been complaining about graduates who can drive a package and not sketch a bending moment for at least that long. What is arriving now takes the next layer off. A model built from the drawings. The load takedown, the sizing, the connections, the schedules, the clause by clause check against the standard, the calculation package written up so a stranger can follow it. Specification and report as well. Nobody sane enjoys the write-up, and I’d hand the lot over without an argument.

The usual reply is that the calculation was never the job, which is true, and then comes the sentence I want to argue with. The job is deciding what to worry about. I don’t think it is, and the reason is a compliment to your profession. Your worry list is published. A century of failures got turned into load combinations, factors, deflection limits, tying requirements, accidental loads, fire, wind, the lot. That is what a design standard is. It is a written list of what to worry about, paid for in collapses, and it is the most successful piece of knowledge transfer any trade has ever managed. Anything written down that plainly is available to whatever reads it next.

The judgment is somewhere else, and there are two of them, and they turn out to be one.

Most of what’s published assumes new work. New steel of a known grade, concrete somebody will test, timber with a stamp on it. There is guidance for assessing what is already standing, it is better than it was, and it runs out early. Then you get handed a building with cast iron in it, or wrought iron, or lime mortar, or a floor of shallow brick arches sitting on iron beams, or timber that nobody graded because grading did not exist. There is no clause for a beam a plumber notched to get a pipe through. There is also no clause for the fact that this floor has carried a working machine shop for generations without a murmur, which is evidence, and rather good evidence, and there is nowhere to put it in the calculation. You use it anyway. Every engineer does. Nobody has written down how.

The other one eats your week. How much to open up, and where. Every hole costs money, needs access, wrecks a finish, and has to be argued for with a client who cannot see why they are paying you to make holes in their own building. So you ask for a few in the right places instead of a lot in the wrong ones. Most of the job then rests on that choice, and you made it by guessing what was likely to be in there.

The guess is the trade. Not construction in general, which is published, taught and examined. What you are running on is a private catalogue of buildings you have had open. The era, the town, what the builders around here did when they were behind, which decade put a steel in properly and which one took the wall out and hoped. A floor that moves under you as you cross it has told you the span before you measure anything. A crack has categories and the categories are printed, but whether it is still moving is settled by paint, by dust, by whether the last repair has opened again, and by whether the door at that end binds in winter. That is where the two judgments turn out to be one. Where to open up, and what to make of what you find when you do, come out of the same catalogue, and there is nothing else to answer either of them with.

Then the ceiling comes down and there is a steel in there nobody drew, sitting on half a brick, painted the same color as everything else, and the floor above has been fine since somebody’s grandfather put it in. You have seen it now. There is no clause for that either.

What is happening with that knowledge is not the familiar story about wisdom being too deep for words. It is smaller and more annoying than that. Every piece of it is worth almost nothing on its own. One street, one decade, one builder’s habit. Write it down and you have produced a sentence nobody will ever go looking for. It pays only as an accumulation, held in one head, sorted by resemblance, and handed up without being asked for. Firms have tried to keep it. Defect libraries, lessons learned, the folder on the server that somebody set up with real enthusiasm. They fail, and not because engineers are lazy. The unit of this knowledge is too small to be worth recording and there is too much of it to record all of.

Scanners are getting better faster than the argument I’ve just made. Radar through concrete, a camera down a small hole, meters that find the reinforcement, monitoring left on a crack through a season. Feed a point cloud into a model and a lot of what I have been calling unknown stops being unknown. I think that is true and I think it takes a real bite out of my argument. What a scan gives you is shape. It does not give you the grade of the steel, or whether the connection was ever finished. It won’t tell you what the mortar has turned into inside the joint, or whether the bearing under that beam is brick or rubble with a face on it. Somebody still has to decide what to scan and get it paid for. I don’t know how far those tools go and I wouldn’t trust my own guess about it.

Which leaves the awkward fact about the catalogue. It is built out of whatever you happened to have open, so it is local, lopsided and full of holes you cannot see from the inside. Send somebody to a town they have never worked in and they are confident in exactly the same way, right up until they aren’t. Nobody in the office can tell the difference, and on a bad job neither can they.

The next time a ceiling comes down in front of you, stand there for a minute before anybody starts sweeping up. Everything you can see was invisible on Monday, and the drawing you designed from is still in the car with none of it on it. That drawing was wrong long before you got there. So is the next one.

Any fool can cut. Your trade has been saying that to itself for generations, usually with the other half attached, the part about knowing when not to. It is the one thing surgeons say about their own work that outsiders never repeat back. It is also the one thing nothing in your training, your figures or your pay has ever behaved as though it believed.

The operating room is the most rehearsed room in the building, and that is why it’s the part of your work with the clearest path to being taken apart. I’m not telling you a machine is about to do a bowel resection on its own, and you’d close the tab if I did. The point is smaller and harder to argue with. Cutting is the end of a long process, and it’s the end that has been written down. Steps, approaches, checklists, planning off the imaging, navigation, instruments that hold a line better than a tired hand at the end of a list. Your trade did most of that to itself, on purpose, because standardizing the technical act is how outcomes got better. Anything a profession has already specified is available to be assisted, and then to be assisted more.

Meanwhile the operating room is a minority of your hours and every surgeon knows it. Clinic. The meeting where a room full of specialties looks at one patient. The ward round, the on-call phone, the letters, the complaints, the consent conversations, the family who want a word outside.

One appointment out of all that is what I actually want to talk about. It’s short, it happens in clinic, and nothing in the way your work gets counted describes it properly.

An old man is sitting in front of you with something you could take out. The scan says resectable. His heart is not going to enjoy the attempt, he lives alone, he was already slowing down before any of this, and his daughter has read about the operation and would like him to have it. You could do it. You are good at it. You have done it many times and the technical part does not frighten you at all.

You are going to tell him no, and the appointment is going to run long.

Notice what you did not use to decide. Not the scan, which everyone in the room can see. Not the staging, which is a category. You used how far he walks now, whether he gets up in the night, and how he did after the last small thing that went wrong. Whether there is anybody at home for the weeks afterward. What he actually wants, which took a while to get out of him with his daughter sitting there. Then you weighed a recovery against the life it would be a recovery into.

You have a script for the other conversation. Consent has been trained into you, shaped by law, written into a form, argued over in court. Somebody has thought hard about how to tell a person what you are going to do to them and what could go wrong. There is no equivalent for this one. Nothing ever taught you how to say I could operate and I’m not going to, to a man who came in hoping, with his daughter’s face changing while you speak. You made your own words up years ago and you’ve been using them since.

You don’t decline alone. The case goes to the meeting, a room full of specialties looks at it, and that is exactly what the meeting is for. It’s a good arrangement. It has saved a great many patients from one person’s bad afternoon, and any post that skipped past it would deserve the eye roll. I might be splitting a hair that doesn’t exist. Plenty of surgeons hold that the meeting genuinely decides.

It still doesn’t move what I’m describing. A meeting recommends. A named surgeon accepts the case onto a list or doesn’t, and the one holding the knife is the one who can refuse it. Everyone has sat in the version of that meeting where the room agrees with whoever spoke first, the form gets completed, and nobody in it would say afterward that the decision was theirs. Everyone has seen a committee turn into paperwork. What keeps your own acceptance from going the same way isn’t a rule. It’s that you’re the one they call in the middle of the night when it goes wrong, and there is no version of this where that lands on the meeting.

Then there’s the part that stays open. Operate and it goes badly, and you find out. It gets discussed at the meeting where deaths and complications are gone through in front of your colleagues, it goes into your figures, and everyone can see it. Decline, and the decision is written down too, in the notes and in the letter back to the referrer, and none of that is an answer. If he dies at home in the spring, nobody can tell you whether you were right. Not the family, not the referring physician, not you, not ever. There is no version of him who had the operation, so there is nothing to hold the decision up against.

You carry that anyway. That is the job I’m trying to describe. Somebody has to hold a decision that will never be settled, in a career where everything else gets checked, and go back to clinic on Thursday and do it again.

A model will produce a risk score for that man, and it will be a decent score. What that score can and can’t be is worth pinning down. It’s built from people who were operated on, because those are the ones with outcomes attached. The man you turn down leaves no trace in that data of what happened to him next. So the score can tell you what tends to happen when somebody like him goes on the table. It cannot tell you what happens if he doesn’t, and it has never once had to say so to a daughter.

There’s a nastier turn in this, and your trade found it first. Publish outcome figures by surgeon and declining the difficult case becomes the rational thing to do, for reasons that have nothing to do with the patient. Everybody in surgery knows a colleague who stopped taking the hard ones and got a better looking year for it. So refusing is not automatically the noble half of the story. It’s just where the weight sits, and if you change what gets measured, you change who is protected and who is left holding it. That is worth watching whenever somebody proposes to score this work.

Picture your figures for the year, the real ones, the ones your unit gets judged on. Now picture the second list beside them, the patients you decided against, with no outcomes on it at all. Nobody keeps that list. I can’t tell you what’s on it, and neither can you, and I’d want anybody planning to automate this work to explain that gap to me before they started.

The part of your work with the most paper under it gets checked hardest. The part with almost no paper under it is close to final, and nobody sat down and planned that. A stack of orders is waiting this morning, settled between two sets of lawyers and typed up by somebody else, and your name goes on the bottom of work you never argued about. Nobody calls this a scandal. It is how the work has always been done, and it is the honest place to begin, because it is already the thing people are afraid of. You have a list today, and you will get through the list.

Research goes. So does the first pass through a file handed over at short notice, the chronology, the fair summary of what each side says, the check that a case still means what it meant when somebody first cited it. The procedural history at the front of a judgment goes, and nobody will mourn it. A first draft of an uncontested ruling on facts nobody disputes goes. And a great deal of what people imagine your discretion to be left years ago, into guidelines and ranges and categories that tell you the shape of the answer before you open your mouth. Judges have been saying that out loud for a long time. It was not a machine that did it.

The rest is short, and none of it sounds impressive written down.

Two people have told you different stories about the same afternoon. The documents don’t settle it. One of them is lying, or both are half remembering something that mattered to them at the time, and you have to write down which. That finding is the least reviewable thing you do all year. A court above you will take your law apart at leisure and leave that alone, because you heard the witness and they didn’t.

I don’t think that deference is a compliment to your eyesight. Anyone who has sat through a long trial knows how ordinary the judgment of a liar really is, and how often confident people get it wrong. It is an allocation. A dispute has to stop somewhere, somebody has to be the one who stopped it, and the system has taken the person who listened to the whole thing and made them final. Not because they see through people. Because the finding has to belong to someone.

The same arrangement is at its plainest when you pass a sentence. Most of the number is often settled before you speak. Where there’s a guideline it has done the arithmetic, the categories have done the rest, and any judge who pretends otherwise is enjoying themselves too much. Then it gets said out loud, by a person, to another person, with that person’s mother sitting behind them. None of that changes the number. It changes who the number came from, and everybody in the room can answer that question without being told.

Liability is the wrong word for what you’re carrying, and the difference matters. Nobody is going to sue you. In most places you have immunity for what you do on the bench, and where you have it, it exists so you can decide against powerful people without pricing the cost to yourself. What you carry isn’t legal exposure. It’s authorship. Your reasons are published under your name. When you get it wrong, a court above you says so in a document anybody can read, other judges will read, and the lawyer who lost in front of you will read twice.

A signature rots, and the objection has been sitting in the first paragraph since you started reading. A person who approves a document they did not reason their way to has produced an audit line and not a decision, and everyone has watched that happen somewhere. You already sign agreed orders in a pile, so you know the feeling from the inside. Put a system in front of a judge that drafts a full ruling, with findings and reasons that read better than his own, on a list that is too long, where the draft is nearly always fine. The honest description of that morning’s work is that somebody checked it looked right.

I can’t point to a rule that stops this, because there isn’t one. The only thing holding is that reversal is personal and public. A machine’s draft, once you adopt it, is your draft. The error gets your name on it and the correction gets your name on it too, and that is an uncomfortable enough arrangement to keep most people reading properly.

I’d rather admit where that protection is thin than pretend it isn’t. It works while the number of decisions is small enough for each one to be attached to a person who can be embarrassed by it. Push the volume up and it wears through. At the small end of civil work, where the sums are modest and nobody is going to appeal anything, I’d expect the person to go first, and nothing in this post rescues that. It ends up as a service with a complaints procedure, which is not the same animal and everybody will pretend it is.

That leaves the part of the job most judges enjoy least. Ask one what the difficult bit is and many will start on the law. The law is difficult the way a puzzle is difficult, and it arrives with cover attached, because you can point upward and say the answer was never yours to choose. Deciding who is lying comes with nothing to point at. No authority, no clause, no table. As the rest of the work moves off your desk, that is what your day thickens with, and it is the part where you are most on your own and least able to show your working. That last bit is a guess. It comes off what judges write about the job rather than off doing it, and a week of lists, case management, remedies and sentencing may look nothing like the picture I’ve drawn.

There’s a version of the future where that gets described as efficiency. The reading was done for you, the draft arrived clean, and all that’s left of the office is the half nobody can help you with. Nobody planning this has said out loud that they are concentrating a job down to its most exposed component. It would be an honest thing to say.

When somebody describes a system that would decide these cases, don’t argue about whether it would get them right. Ask them something smaller. Who gets told they were wrong, where is that person standing when they’re told, and what happens to them afterward. If there’s no answer to that, they haven’t described a court.