Loading...
On January 28, 1986, NASA launched Space Shuttle Challenger in 36°F weather — 15 degrees colder than any previous launch. The night before, engineers at Morton Thiokol, the solid rocket booster contractor, held a teleconference with NASA managers. Roger Boisjoly and Allan McDonald presented data showing O-ring seals in the boosters lost resilience below 53°F. At low temperatures, the synthetic rubber couldn't expand fast enough to seal the joint between booster segments, allowing superheated gas to escape. Boisjoly recommended postponing launch. NASA's Lawrence Mulloy pushed back: 'My God, Thiokol, when do you want me to launch — next April?' Under pressure, Thiokol's senior VP Joe Kilminster overruled his own engineers and approved launch. The decision chain bypassed the people with th...
Popular framing: Some engineers got overruled, and seven astronauts died because management pushed too hard.
Structural analysis: Twenty-four prior flights had eroded the O-ring safety margin without an event, and the institution had absorbed each anomaly as the new acceptable baseline (normalization of deviance). Schedule pressure flowed down the chain in a way that inverted the burden of proof — engineers had to prove it was unsafe rather than managers proving it safe. The redundant secondary O-ring was a known illusion; the swiss-cheese holes were already aligned when the cold front arrived.
The individual-blame framing is dangerous precisely because it is satisfying: it resolves the tragedy into a morality tale, which makes it feel preventable by simply replacing bad actors with better ones. The structural framing reveals that the same system architecture will reproduce the same failure with conscientious, well-intentioned people — which is why the same organizational pathologies recurred at Columbia 17 years later despite Challenger being a celebrated cautionary tale within NASA itself.
