Control Structures in Social Systems¶
The Universal Control Pattern¶
Every social system has a hierarchical control structure with the same basic shape. Authority flows downward; feedback — ideally — flows upward. STPA analyses this structure by asking five questions of every system:
- Feedback richness — how many independent channels carry information from the base to the top, and how accurately do they represent reality?
- Self-sealing tendency — can the process model at the top be corrected by information from below, or does it filter out contradictory signals?
- Accountability voids — where is the controller also the interested party, structurally preventing independent oversight?
- Circuit breakers — what mechanisms exist to interrupt a harmful escalating loop before it causes irreversible damage?
- Rung match (social-systems extension; see Justificatory Rungs) — at what justificatory rungs do the loop's control action and feedback operate, and is the loop symmetric? Does the system's claimed rung match its operating rung?
The four levels of the universal pattern are:
| Level | Role |
|---|---|
| Supreme Authority | Issues doctrine, law, strategy, or policy |
| Intermediate Controllers | Interpret and transmit downward; aggregate and filter upward |
| Local Community | Enforces norms through social mechanisms; primary source of ground-truth feedback |
| Individual | Internalises norms; self-regulates; ultimate recipient of system outcomes |
What varies across systems is: who occupies each level, what mechanisms connect them, and how honest the upward flow is.
Canonical reference
The technique definitions — the five diagnostic questions and the four dangerous patterns — live in knowledge/se-techniques/control-structures/ and (for the rung extension) knowledge/se-techniques/justification-rungs/. The per-system profiles for all ten social systems, with claimed-rung and operating-rung tags, live in knowledge/system-catalogues/social-systems/cross-system/control-structure-profiles.md. The cross-system rung comparison is in knowledge/system-catalogues/social-systems/cross-system/justification-rungs-by-system.md.
The Ten Systems: Control Structure Profiles¶
For each of the ten social systems, the same four-level pattern is filled in with the specific controllers, intermediate actors, local communities, and individuals that occupy each role, and each system is rated on the four diagnostic questions.
The complete profiles — Kingdom, Republic, Theocracy, One-Party State, Corporation, University, Military, Religion (Church), Family, Verein — and the cross-system comparison table are in knowledge/system-catalogues/social-systems/cross-system/control-structure-profiles.md. A short summary of the pattern of feedback richness, self-sealing tendency, accountability voids, and circuit breakers across the ten systems appears there as a single table.
The key observation the profiles support is that the same control-structure weakness recurs in structurally identical forms across very different systems: the monarch judging the Crown's own claims, the bishop investigating his own clergy, the commanding officer prosecuting his own troops, the board setting the pay of executives who chose the board, the peer reviewing his own competitor's work. The institutional vocabulary differs; the structural pattern is the same.
The Four Most Dangerous Structural Patterns¶
Across all systems, four patterns recur wherever the most serious harm occurs. The first three are domain-general; the fourth is the social-systems extension introduced in Justificatory Rungs.
Pattern 1: The Accountability Void. The controller and the interested party are the same entity. No external actor has authority to review the decision. The remedy in every case is the same: structurally separate the controller from the interested party, and give the separating body genuine authority.
Pattern 2: The Self-Sealing Process Model. The top of the control structure populates its own process model — its internal representation of reality — from sources it controls. Contradictory information is excluded by design (doctrine), by incentive (career risk for bearers of bad news), or by structure (classification, privacy norms). The model diverges from reality while the authority acts with increasing confidence. The remedy: establish independent information channels with direct access to the apex, reporting to a body outside the hierarchy.
Pattern 3: The Proxy Metric. The system measures something that is correlated with its actual goal, attaches resources and careers to that measure, and then watches as the system reorients toward producing the measure rather than the goal. Exam scores replace education. Quarterly earnings replace sustainable value creation. Publication counts replace scientific knowledge. Compliance reports replace operational readiness. The remedy: continuously examine what is being measured and whether the feedback loop connects to the goal or to a proxy, and restructure the measurement accordingly.
Pattern 4: Rung Asymmetry. The downward control action and the upward feedback on the same loop operate at different justificatory rungs. The controller transmits commands at rung 1 (authority, tradition) but the corrective signals it would need to register arrive — or are expected to arrive — at rung 3 or higher (empirical, audited, replicated). The controller's process model classifies the higher-rung feedback as out-of-band and filters it out. Instances: doctrinal authorities receiving abuse reports as rung-1 hostility rather than rung-3 evidence; autocracies receiving independent press reports as treason rather than information; family systems treating children's developmental signals as defiance rather than health data. The remedy: insert an independent feedback channel that operates at rung 3 (or higher), routes around the rung-1 filter, and reaches the controller's process model directly. Most of the canonical architectural remedies in the next chapter are rung-elevation moves of this kind.
These four patterns are the recurring targets of the architectural remedies in the next chapter. The technique-level statements — with the failure mode each corresponds to in a generic control loop, and the remedy preconditions — are in knowledge/se-techniques/control-structures/dangerous-patterns.md (Patterns 1–4) and knowledge/se-techniques/justification-rungs/dangerous-mismatches.md (Pattern 4 in detail, plus two further rung-specific patterns: Claimed-Rung Inflation and Cross-Loop Rung Imposition).