Near-Miss and Deviation Review¶
Signal triage — instantiates Enacted-Control Verification and Closure
Mines near misses, deviations, and weak signals to pick which controls are most likely lying about their health and should be verified next.
A Near-Miss and Deviation Review is a targeting mechanism: it reads the stream of near misses, minor deviations, small losses, and weak operational signals to decide which controls are most likely to be failing quietly and therefore most deserve verification effort. Its defining move is inference from the almost-happened: a near miss is treated not as a lucky non-event to be filed and forgotten but as a leading indicator that a control's real margin is thinner than its green status claims, so the review ranks candidate controls by the exposure their signals imply and points the sampling of downstream verification at them. It does not itself reconstruct, reperform, or close a control — it is the front-end that spends scarce verification attention where the weak signals say the hidden risk actually is.
Example¶
A commuter railway tracks signals passed at danger (SPADs) and a range of lesser events — late brake applications, drivers reporting sighting difficulties, a rise in cautionary-signal approaches at certain junctions. Formally, the overspeed and signal-protection controls are all rated effective; there has been no collision. A Near-Miss and Deviation Review refuses to wait for one. It treats the weak signals as evidence about which controls are quietly eroding and ranks where verification should go next.
The pattern that emerges is not visible in any single incident. One junction shows a cluster of late brake applications and near-SPADs concentrated on a specific approach under low-sun glare — a control whose real margin is being eaten by a condition the risk assessment never weighted. And crews are reporting that on-time performance at that junction is being held together by drivers braking earlier "just in case," a reserve of personal caution that is silently compensating for the thin margin. The review ranks the signal-protection control at that junction as the top verification candidate — high implied exposure, and a control apparently running on consumed driver reserve — and hands that target to a walkdown or work-as-done audit. Its product is not a fix but a priority: verify this control, here, next, before the near miss becomes the miss.[n1]
How it works¶
- Ingest the weak-signal stream. Near misses, minor deviations, small losses, and precursor reports are pooled as evidence about control health rather than closed as isolated events.
- Attribute signals to controls. Each signal is linked to the control whose margin it implicates, so that clusters point at a specific control-and-condition rather than a vague area.
- Rank by implied exposure. Candidate controls are scored by the severity and frequency of their signals, and by leading indicators like reserve being spent to keep the control looking healthy.
- Emit a verification target. The output is a prioritized selection — which control, under which condition — that steers a downstream sampling plan, not a verdict on the control itself.
Tuning parameters¶
- Signal sensitivity — how weak a signal counts as worth pooling. Lower thresholds catch earlier erosion but raise noise and false leads.
- Attribution strictness — how confidently a signal must map to a specific control before it drives targeting, trading missed links against spurious ones.
- Reserve-signal weighting — how heavily "the control only holds because slack is being spent" counts toward priority versus incident-like signals.
- Ranking horizon — whether to prioritize on recent clusters or longer-run accumulation of small deviations.
- Target fan-out — how many verification candidates to emit per cycle, balancing focus against coverage of a broad weak-signal field.
When it helps, and when it misleads¶
Its strength is leverage: verification is expensive and can only reach a fraction of controls, and this mechanism aims that fraction using the cheap evidence the organization is already generating, catching erosion in the precursor phase rather than after loss. Treating a near miss as data about a thinning margin — and treating consumed reserve as an early warning — is precisely the preoccupation with failure that distinguishes organizations that stay reliable under complexity.
Its failure mode is that weak signals are biased by what gets reported: a punitive or indifferent culture suppresses near-miss reporting, so the quietest controls can be the most dangerous, and the review chases the loud signals while the silent erosion goes untargeted. It can also over-fit to recent salient events and mistake a random cluster for a trend. The classic misuse is treating the review as an end in itself — ranking and re-ranking risk without ever handing a target to a mechanism that actually verifies the control, so nothing is confirmed or fixed. The guarding discipline is to protect and encourage near-miss reporting so the signal field is honest, weight silence as a possible blind spot rather than an all-clear, and always route the top-ranked target onward to real verification.
How it implements the components¶
work_as_done_sampling_plan— turns the weak-signal ranking into a risk-weighted selection of which controls and conditions downstream verification should sample next.discrepancy_severity_and_risk_rating— scores candidate controls by the severity and frequency their near misses and deviations imply, ordering the verification queue.reserve_consumption_signal— treats hidden slack being spent to keep a control looking healthy as a leading indicator that pushes a control up the priority list.
This review only targets; it does not reconstruct the enacted control, judge its effectiveness, or close a gap (enacted_control_trace, control_effectiveness_evidence_rule, corrective_closure_route) — those belong to the mechanisms it feeds, such as Work-as-Done Audit, Line-of-Defense Sample Reperformance, and Corrective Action Effectiveness Retest.
Related¶
- Instantiates: Enacted-Control Verification and Closure — supplies the risk-weighted targeting that aims scarce verification effort at the controls most likely failing quietly.
- Sibling mechanisms: Work-as-Done Audit · Operator Shadowing and Contextual Inquiry · Control Performance Walkdown · Document-to-Practice Trace Matrix · Process-Mining Nominal-Actual Comparison · Line-of-Defense Sample Reperformance · Corrective Action Effectiveness Retest · Safeguard Bypass Probe · Exception, Waiver, and Override Log Review
Editorial Notes¶
Form Classification¶
Form family: Decision, Gate & Allocation
Rationale: Near-Miss and Deviation Review operates as a case-specific gate, selection, routing, prioritization, or resource disposition because it mines near misses, deviations, and weak signals to pick which controls are most likely lying about their health and should be verified next.
Independent corroboration: The frozen evidence defines Near-Miss and Deviation Review as 'Mines near misses, deviations, and weak signals to pick which controls are most likely lying about their health and should be verified next', so its operative form is Decision, Gate & Allocation.
Nearest alternative: Assessment, Review & Assurance — Near-Miss and Deviation Review includes features of a bounded evaluation of existing evidence or work that produces a finding or disposition, but its defining operation is a case-specific gate, selection, routing, prioritization, or resource disposition.
Review outcome: Independent reviewer agreement; medium confidence.
Origin Attribution¶
Primary origin: Engineering & Design
Origin pattern: Cross-disciplinary synthesis
Present-day reach: Multi-domain
Rationale: Safety and reliability engineering established near misses and deviations as leading evidence of weakening controls.
Related originating lineages:
- Aviation & Aeronautics — Aviation safety systems materially developed formal near-miss and deviation reporting and investigation.
- Medicine & Healthcare — Patient-safety practice independently developed near-miss review to verify clinical controls.
- Organizational & Management Science — High-reliability-organization research contributed preoccupation with failure and the practice of using weak signals to target managerial attention.
Review resolution: Both independent reviews agree on primary origin engineering_design; reconciliation resolves alternate_origin_disagreement, origin_mode_disagreement. Formative alternate lineages retained: organizational_management, aviation_aeronautics, medicine_healthcare. The broader reach of later applications is kept separate as domain_reach=multi_domain; origin_mode=cross_disciplinary_synthesis describes the historical relationship among lineages. Confidence is conservatively reconciled to high, and encyclopedia_synthesis=true preserves the reviewers' boundary judgment.
Encyclopedia synthesis: The exact catalogued form synthesizes established practice rather than reproducing a single standard historical label.
Review outcome: Reconciled after independent review; high confidence.
Notes¶
[n1] Preoccupation with failure is the first of the five hallmarks of High Reliability Organizations described by Karl Weick and Kathleen Sutcliffe (Managing the Unexpected): reliable organizations treat small failures, near misses, and weak signals as information about systemic vulnerability rather than as noise, and act on them before they aggregate into disaster. ↩