BESSÓ Systems

Knowledge · how change becomes safe

Eight frames for reading a floor.

Improving an operation means changing it. People don't resist change — they resist changing what they can't see. These frames trace the sequence that makes a change safe to attempt: how to read it, order it, and manage it. Read them in order.

Frames

Eight frames — the sequence behind a safe change. Read them in order.

F1decision-making

Cynefin — choose the method by the domain

Most "method failures" are domain errors. Before you plan a change, know where the problem actually sits — complicated problems respond to analysis and best practice; complex ones require probing first. A complicated-world tool used on a complex problem fails not because it's bad, but because it's in the wrong domain. When standard work drifts despite training, when a metric looks fine but the operation isn't, the first question isn't "how do we push harder?" It's "are we in the right domain?"

BESSÓ Systems — Cynefin Operational Map Interactive Cynefin map — click a domain to see its detail card. PROBE · SENSE · RESPOND COMPLEX patterns emerge new launch · unstable process operators learning SENSE · ANALYZE · RESPOND COMPLICATED expert analysis recurring OEE loss technical root cause ACT · SENSE · RESPOND CHAOTIC stabilize first safety risk · line down quality spill SENSE · CATEGORIZE · RESPOND CLEAR known standard standard work known defect · checklist DISORDER choose domain before tool
In short

Snowden's framework sorts a situation by the kind of cause-and-effect at play, and prescribes a different way of acting in each.

Seen in
Sources

Snowden & Boone, HBR 2007

Know the domain, and the order of change settles. ↓

F2the sequence

Legibility first — standardize → automate

Standardize → automate is an order, not a menu — but how strictly depends on the domain (→ F1). Standardized data is the precondition for automation, digital twins and reporting anyone trusts. In a complicated, knowable environment — much of software — you can probe and automate with a lighter standard, because the same inputs reliably give the same outputs. On a complex floor, where they don't, skipping legibility is exactly what puts the project on sand. And resistance to a mandated standard is rational when the thing being changed is still invisible — the fix isn't to push harder, it's to make it legible first.

LEGIBLE STANDARDIZE AUTOMATE the shortcut that snaps ✕
In short

You can't improve, standardize or automate what you can't see. Standardization is the act of making an operation legible.

Seen in
Sources

Lean Enterprise Institute — Standardized Work ↗ · Ohno, T. (1988) Toyota Production System

That order works for one reason — it lowers the cost of changing, for people. ↓

F3the social layer

Shared signals — legibility as coordination

Most operational complexity is social. Many people, tacit knowledge scattered across them, and the constant cost of staying in sync — that's n² coordination links: every order, check, conversation. A shared signal cuts that to n: each person connects to the signal, not to every other person. Sun Tzu commanded armies this way — not by watching every soldier, but by drum and flag. Andon, a kanban card, 5S floor tape: the same logic, 2,500 years on. And it closes a loop: when the gap between the real method and the documented one is visible to everyone — including the person doing the job — the operation converges on the standard with no one enforcing it. Legibility doesn't just communicate; it coordinates. (This is also where Agile lives → F8.)

COMPLEX emergent · no center · social COMPLICATED ordered by one shared signal coordinate by watching · n² links — every check, order, chat a shared signal tames social complexity coordinate by signal · n links — each linked only to the signal

nodes = people · left links = orders/checks/conversations · right links = the one shared signal · arrow = the domain shift it produces

In short

Visual management — 5S, andon, kanban — coordinates work through signals everyone can read, instead of through supervision, orders or meetings.

Seen in
Sources

Sun Tzu, The Art of War · Ohno (andon, kanban) · Hirano (5S) · Shingo (poka-yoke)

But some of what must change resists being made visible. ↓

F4knowledge

Tacit vs explicit — why the manual fails

A standard is an attempt to externalize tacit knowledge — and it's always partial. The drift between the documented method and the real one is almost never negligence; it's tacit knowledge correcting an incomplete standard. The operator who skips step 3 isn't being careless — they've learned that step 3 as written doesn't account for the variation that arrives every Tuesday. The retiring expert doesn't take their knowledge out the door because they're secretive; the knowledge was never legible enough to write down. The drift is a signal: it's the floor telling you the standard is wrong.

EXPLICIT — SOPs, work instructions TACIT — feel, judgment, the workaround nobody wrote down
In short

Explicit knowledge can be written; tacit ("we know more than we can tell," Polanyi) resists codification. SECI describes the conversion.

Seen in
Sources

Polanyi · Nonaka & Takeuchi (SECI)

And where the work stays invisible, the numbers start to flatter. ↓

F5metrics

Vanity metrics — what OEE hides (Goodhart)

A green OEE can hide the exact loss it's meant to expose — not through dishonesty, but because that's what any single metric does once it becomes a target (Goodhart's law). OEE is an accounting metric: it's only as honest as the definition of "good" underneath it. File rework as "standard process" and a reworked unit still counts as good — OEE never sees it.

Goodhart isn't a dead end, though — it's a design rule. The way out isn't a more accurate OEE; it's anchoring at least one indicator to something you can't redefine. A physical metric — energy, mass, real time — obeys physics, not your accounting. An energy-per-unit indicator can't be flattered by overtime: rework burns the energy whether you book it as good or not. Read a physical measure against a counted one and the gap appears on its own — and that gap is the most useful signal you have. (This is exactly how an ISO 50001 energy indicator exposed an OEE that wasn't lying on paper — see Case 03.)

90 100 110 120 index (Q1 baseline = 100) ↑ rising = worse time — one production quarter gap = rework burns energy · never books as a loss read together → the gap shows energy / unit — physical metric OEE — accounting metric

scale: 4 px per index unit · y=185 → 100 · y=105 → 120 · green = OEE (accounting, flat) · red = energy/unit (physical, rising to ~124) · shaded = rework hidden by OEE, captured by energy · dashed = divergence point

In short

OEE = availability × performance × quality — an accounting metric. Goodhart's law: once a measure becomes a target, it stops measuring well. The fix: pair it with one anchored to physics, which can't be gamed by a definition.

Seen in
Sources

Nakajima (OEE) · Goodhart's law

Fake the measure and the change fails exactly where no one is looking. ↓

F6where projects fail

The sociotechnical seam — where change actually fails

Failures live at the interface between the technical design and the human system around it — joint causation, in the overlap. The human and organizational factors weigh at least as much as the technical ones, and get a fraction of the planning. A robotic cell can be technically flawless and operationally stranded because the operators have no visibility into which program is running and no way to detect a wrong parameter. The seam is where the design ends and the human experience begins. Design for the seam — not as an afterthought, but as a constraint from the start.

TECHNICAL SYSTEM machine · HMI · PLC parameters · data HUMAN SYSTEM trust · habit · training visibility · ownership THE SEAM flawless cell + no operator visibility = stranded joint causation what drives adoption (manufacturing) — human / org factors outweigh technology human / org: strategy 21.3 · org 21.0 · mgmt 20.9 · environment 17.9 technology 19.0 Sukathong et al., 2021 · SEM · n=212 manufacturing SMEs
In short

Sociotechnical theory (Tavistock): work is a joint technical-and-social system; optimize one half alone and you degrade the whole.

Seen in
Sources

Trist & Bamforth · Sukathong 2021 · Reiman 2021 · Blut 2022

Which is why the resistance you meet is usually telling the truth. ↓

F7change

The 70% myth, and resistance as information

It's a phantom statistic — the sources cite each other in a loop, with no empirical ground. No one can trace it to data; the original author disowned it. The field can't agree on a definition of "change failure," which is itself a sign we're in a complex domain — one where the answer isn't measured, it's interpreted. The myth does real damage: it scripts resistance as something to overcome with more communication and more change management budget. But resistance is information. When people push back on a change, they're usually telling you something true about the gap between the plan and the floor. Investigate it — don't overcome it.

src A src B src C src D no evidence
In short

The cited "70% of change fails" has no valid empirical basis; the original author disowned it.

Seen in
Sources

Hughes 2011 · Smith 2002 · Jones 2018 · McKinsey 2009

So you don't overpower a complex change — you grow it, in increments. ↓

F8the management answer

Agile — growing change in the complex domain

You can't plan a change whose outcome can't be known in advance. In the complex domain (F1), cause and effect only line up in hindsight — so a long, detailed plan aimed at a fixed target is a bet that the target won't move. It always moves. Agile is the answer: don't plan the whole change, grow it — deliver value in increments small enough that you learn and correct before the change has already failed. Probe, sense, respond.

Agile was written for software, and bolting "sprints" onto a furnace is naive — you can't iterate a casting cycle. What transfers isn't the ceremonies; it's the logic underneath: empiricism over prediction, tight feedback loops, working output over documentation. That logic is the only honest way to run a change you can't fully foresee — on a line or in a codebase.

TARGET POSITION TIME → start of the change initial target (where you aimed) target shifts actual target (where it moved) PLAN-DRIVEN — one long bet, aimed where the target was ITERATIVE — probe, sense, respond; each increment corrects toward where it moved

X = time · Y = where the change is aimed · red = plan-driven (aims once, misses when target moves) · green = iterative (each increment re-aims)

The discipline is knowing which domain you're in. Agile on a complicated, knowable problem is overhead an expert could have planned away; a fixed plan on a complex one is the expensive bet. Most operations are both at once — the machine is complicated, the people changing around it are complex.

COMPLICATED knowable — plan & execute standard methods: SMED, A3, line balancing COMPLEX emergent — probe & iterate Agile: short loops, working output Know which you're in (F1). The wrong posture wastes effort on one side and gambles on the other.

match posture to domain (F1) — Agile belongs on the right

Which is why this frame sits at the end. Everything before it makes a change visible — the domain (F1), the sequence (F2), the signals that coordinate it (F3), what resists being made visible (F4), what hides in the numbers (F5), where it fails at the seam (F6), why it's resisted (F7). Agile is what makes a change correctable. A change becomes safe when it's both — see it, and grow it.

In short

Agile (Manifesto, 2001): empiricism, tight feedback, working output over plans. The posture for the complex domain — not the ceremonies, the logic.

Seen in
Sources

Agile Manifesto (2001) · Snowden (Cynefin) · Boehm & Turner

Methods & systems

The reference shelf — standard methods, anchored to where I used them. Subordinate to the frames above.

SMED — and why "seeing" was the bottleneck

The logic was never the hard part; observing every changeover was.

Seen in: Case 02 · Lab 01 · Source: Shingo

The automation pyramid — SCADA vs MES

Which layer owns which decision, and why reporting breaks when they're confused.

Seen in: Case 03 · Source: ISA-95

ISO 50001 / EnPI — energy as a discipline

The certificate is visible; the engine is committing to watch numbers you used to ignore.

Seen in: Case 03 · Source: ISO 50001

Flow & the seven wastes (VSM)

Waste is invisible until the flow is drawn.

Seen in: Lab · layout · Source: Rother & Shook

Frames are for using, not filing.

Every entry here came out of a real operation and points back into one.