Skip to content

Premortem Margin Review

Structured review (ritual) — instantiates Safety Margin Design

Convenes reviewers to imagine the system has already failed and work backward to name which margin was too thin, missing, or quietly consumed.

Premortem Margin Review is a facilitated exercise in which the team assumes the failure has already happened and reasons backward to the margin that gave way. Its defining trait, distinct from the quantitative Stress-Test Margin Check, is that it works through imagined failure to surface the soft, human, assumption-based margin faults that numbers miss — a buffer sized to the average instead of the surge, a margin that was never there, a hidden assumption everyone shared, or headroom that pressure consumed with no one defending it. It converts prospective hindsight into a list of thin margins, each with an owner, before anything breaks.

Example

Two weeks before a large open-air music festival, the operations team runs a premortem. The facilitator sets the scene: "It's the Monday after. The event ended in a serious injury and the second day was cancelled. Each of you: write down why." Working alone first, then pooling, people surface things no spreadsheet flagged. The medical tent was staffed to the average casualty rate, not a heat-wave surge — a margin sized to the mean. The water supply had no reserve if a single main failed — a margin that was simply missing. The comforting "we can always open Gate C" plan rested on a service road the city was quietly planning to close — a false shared assumption. And no single person owned the crowd-density limit, so it drifted upward as more tickets sold — a margin consumed by commercial pressure with no defender. Each finding leaves the room as an assigned action with an owner, before the gates open.

How it works

The distinguishing moves:

  • Assume the failure has occurred — the premortem framing, which licenses people to voice doubts a "will this work?" review suppresses.
  • Generate reasons individually first, then pool them — prospective hindsight cuts groupthink and overconfidence.
  • Classify each margin fault — too small, missing, false assumption, or consumed-and-unowned.
  • Log the false assumptions and assign an owner to every exposed margin, especially the politically consumed ones.

Tuning parameters

  • Failure framing — a specific vivid failure vs. an open "it failed"; specific prompts surface concrete margins.
  • Individual-first vs. open — writing before discussing protects against the loudest voice and anchoring.
  • Room composition — how diverse the reviewers; outsiders see margins insiders have normalized.
  • Conversion to action — how firmly each finding becomes an owned, tracked task rather than a noted concern.

When it helps, and when it misleads

It is cheap and uniquely good at surfacing the margin faults numbers hide — political consumption, shared false assumptions, and gaps no analysis was pointed at. Its failure mode is becoming theater: a lively session whose findings are never assigned or tracked changes nothing, and an unfacilitated one lets the senior voice set the story. The classic misuse is running it to bless a plan already fixed — inviting the exercise for cover while ignoring what it turns up. The disciplines are individual generation first, an owner and a due date on every finding, and a revisit before go-live to confirm the thin margins were actually thickened.[1]

How it implements the components

Premortem Margin Review fills the human, assumption, and ownership side of the archetype:

  • stress_scenario_set — the imagined failure scenarios the review generates and reasons backward from.
  • assumption_register — the false or fragile shared assumptions the review surfaces and records for tracking.
  • accountable_margin_owner — an owner assigned to each exposed margin, especially the unowned, politically consumed ones.

It does not create or size margins — that is Structural Safety Factor or Conservative Estimate — nor quantitatively verify them (Stress-Test Margin Check), nor monitor them live (Safe Operating Limit Chart).

  • Instantiates: Safety Margin Design — Premortem Margin Review is the ritual that surfaces thin and unowned margins before failure.
  • Sibling mechanisms: Stress-Test Margin Check · Minimum Reserve Requirement · Structural Safety Factor · Conservative Estimate · Capacity Headroom · Budget Contingency · Reserve Inventory · Risk Capital Buffer · Schedule Float · Setback Requirement · Safe Operating Limit Chart

Notes

The premortem is qualitative and imaginative; it pairs naturally with the quantitative Stress-Test Margin Check. The review is best at finding which margins to worry about — the false assumptions and unowned gaps — while the stress test measures whether a suspected-thin margin actually fails. Run together, one supplies the scenarios the other never would have modelled.

References

[1] The premortem — imagining a project has failed and explaining why, before it begins — is a prospective-hindsight technique associated with Gary Klein; the framing reliably surfaces risks that a straight "what could go wrong?" review does not.