Teams are rewarded for keeping services moving, even when identity or data integrity is uncertain.
Where this breaks
Workarounds then convert a contained failure into financial, legal or reputational harm.
The operating move
Define observable stop conditions and the authority to pause transactions, integrations or public action without waiting for root cause.
Value object — The operational card
- Stop trigger
- Scope of pause
- Decision authority
- Restart evidence
The test
Present an ambiguous integrity failure during a drill. The right team should stop the dangerous outcome before proving the cause.