Minimum Viable Service Floor¶
A declared service standard — instantiates Black-Swan Preparedness
Declares in advance the smallest set of outputs, recipients, and service states that must be kept alive under any disruption — and the fair order in which they are protected and restored.
When a shock forces a system to shed load, the decision about what to keep is made either calmly beforehand or brutally in the moment. The Minimum Viable Service Floor makes it beforehand. It is a standing declaration of the irreducible core — which outputs must not stop, which recipients must still be served, what degraded-but-acceptable looks like, and in what order things are given up and brought back — so that model failure never triggers improvised triage under pressure. Its defining feature is that it fixes the floor and the fairness of the floor in advance: not just that critical function survives, but that the burden of degradation falls where it was agreed to fall, protecting the recipients least able to absorb it, before any crisis bargaining begins.
Example¶
A municipal water utility cannot guarantee full service through every conceivable disruption — a treatment failure, a grid outage, a contamination event it never modeled. So it sets a service floor. Full pressure and unrestricted supply are not on the floor. What is: potable water at safe pressure to hospitals, dialysis centers, and dense residential blocks that lack storage; a public standpipe network within walking distance of every neighborhood; and honest, timely public notice of what is and isn't safe. The floor also fixes order — hospitals before car washes, vulnerable households before discretionary use — and defines "acceptable degradation" as reduced pressure with boil-notices, not silent quality loss.
When an actual event hits — say, a pump-station failure the plans hadn't foreseen — operators do not have to invent priorities amid the alarms. They fall to the declared floor: shed the discretionary loads, protect the listed recipients in the listed order, open the standpipes, issue the notice. The equity choices were made in daylight, by people accountable for them, rather than in the dark by whoever happened to hold the valve.
How it works¶
- Name the irreducible core. Enumerate the specific outputs, functions, and recipients that must survive any disruption, distinct from everything that is merely important.
- Define acceptable degradation. State what "reduced but safe" service looks like for each — the difference between graceful degradation[n1] and silent failure.
- Fix priority and fairness. Set restoration order and load-shedding order explicitly, with protection for recipients least able to cope, before a crisis forces the choice.
- Make it accountable. Attach the floor to named owners and to a review that can be pointed to afterward, so the equity decisions are contestable in advance rather than deniable in hindsight.
Tuning parameters¶
- Floor height — how much is declared essential. Set it too high and the "floor" is really business-as-usual that can't be sustained under real shock; too low and it abandons people the system should protect.
- Degradation granularity — how finely "acceptable degraded service" is specified per recipient. Finer specs guide responders precisely but can ossify into brittle rules.
- Equity weighting — how strongly the floor protects low-power or high-dependence recipients versus aggregate throughput. This is the moral dial and the one most likely to be quietly softened.
- Restoration ordering — whether recovery order is fixed, or left to judgment within stated principles. Fixed order is fast and fair; discretion adapts but invites capture.
- Activation clarity — how unambiguously responders know they are now operating to the floor rather than to normal service.
When it helps, and when it misleads¶
Its strength is that it moves the hardest and most values-laden decisions — who keeps service when not everyone can — out of the panicked middle of a crisis and into deliberate, accountable design. It gives responders a fallback that is legitimate because it was set fairly and in advance, and it makes "we protected the vulnerable" a checkable commitment rather than a hope.
Its failure modes are political and practical. A floor set generously in calm times may be unfundable when the shock arrives, so responders abandon it and improvise anyway — the worst of both worlds. It can be gamed in the other direction, quietly lowered to spare cost until it no longer protects the people it names. And a floor declared on paper but never backed by reserves or rehearsed against a real disruption is a promise with nothing behind it. The discipline that keeps it honest is to size the floor to what reserves and continuity arrangements can actually sustain, to protect the equity weighting from quiet erosion, and to test the floor rather than merely publish it.
How it implements the components¶
critical_function_and_survival_floor— it is the explicit statement of the functions, recipients, rights, and minimum service states that must survive even an unpredicted event.legitimacy_equity_and_safeguard_governance— it fixes priority fairness, protection of vulnerable recipients, and equitable degradation before crisis bargaining, so triage is accountable rather than improvised (the equity-of-service facet).
It does not hold the reserves that let the floor actually be met — that is Protected Contingency Reserve's — nor does it govern the emergency powers that declare the floor active and later expire; that safeguard-and-sunset facet belongs to Emergency-Authority Activation and Sunset Gate.
Related¶
- Instantiates: Black-Swan Preparedness — the floor defines the survival target the whole lifecycle protects and restores toward.
- Consumes: Protected Contingency Reserve — the reserve is what makes the declared floor fundable under real disruption.
- Sibling mechanisms: Protected Contingency Reserve · Emergency-Authority Activation and Sunset Gate · Reverse Stress and Failure-Budget Test · Post-Shock Boundary and Rebuild Review · Mutual-Aid and Substitution Agreement
Editorial Notes¶
Form Classification¶
Form family: Rule, Policy & Commitment
Rationale: Minimum Viable Service Floor operates as a standing rule, threshold, contractual commitment, or policy constraint governing future conduct because it declares in advance the smallest set of outputs, recipients, and service states that must be kept alive under any disruption — and the fair order in which they are protected and restored.
Independent corroboration: The frozen evidence defines Minimum Viable Service Floor as 'Declares in advance the smallest set of outputs, recipients, and service states that must be kept alive under any disruption — and the fair order in which they are protected and restored', so its operative form is Rule, Policy & Commitment.
Review outcome: Independent reviewer agreement; high confidence.
Origin Attribution¶
Primary origin: Disaster Management & Risk Reduction
Origin pattern: Cross-disciplinary synthesis
Present-day reach: Multi-domain
Rationale: Predeclared continuity of essential outputs under disruption is emergency and disaster-management practice.
Related originating lineages:
- Law & Governance — Rights and duties can constrain fair protection order.
- Public Administration & Policy — Essential-service planning defines recipients and restoration priorities.
Review resolution: Both independent reviews place the primary provenance in disaster_management. The queued differences (encyclopedia_synthesis_disagreement) concern secondary metadata, not primary lineage. The final retains law_governance, public_administration_policy only where a reviewer supplied a formative-lineage rationale; downstream use or broad applicability by itself is not treated as origin. origin_mode=cross_disciplinary_synthesis because the supplied rationales identify formative contributions that are composed in the mechanism's present form. domain_reach=multi_domain records established application breadth separately from provenance. confidence=high preserves the more cautious evidence assessment. encyclopedia_synthesis=true records whether either reviewer identified deliberate corpus-level composition.
Encyclopedia synthesis: The exact catalogued form synthesizes established practice rather than reproducing a single standard historical label.
Review outcome: Reconciled after independent review; high confidence.
Notes¶
The floor is the reference outcome that other mechanisms point at: Reverse Stress and Failure-Budget Test fixes its loss threshold as breaching this floor, and Post-Shock Boundary and Rebuild Review checks whether the floor held and whether it was set at the right height. Keeping the floor a separate, stable declaration is what lets those mechanisms share one agreed definition of "what must survive."
[n1] Graceful degradation — a system's ability to continue delivering reduced but useful service under partial failure rather than collapsing outright — is the design property a service floor is written to guarantee for its listed functions. ↩