← All mental models

Reusable cognitive primitives

Defense in depth

Reliability comes not from one perfect barrier but from stacking several independent, imperfect barriers, so a threat must breach all of them at once.

Where it appears

Dependencies & synergies

Derived from the graph’s real structure — 4 concepts across 5 disciplines carry this pattern. Every figure is a count, not a score.

Reach across disciplines

How many concepts carrying this pattern are seen through each discipline.

Patterns that travel with it

Other thinking patterns that recur on the same concepts — the more shared concepts, the more often they co-occur.

The shape of its reasoning

What kinds of relationships the carrying concepts form — the relational signature of the pattern.

  • Cause & effect7 edges
  • Kind & structure5 edges
  • Teaching link5 edges
  • Dependency1 edges
Furthest-reaching carriers

Concepts where this pattern does the most cross-disciplinary work — each reaches disciplines beyond its own.

  • Immune systemreachesBiomedical ScienceBiotechnologyEpidemiologyImmunologyMedicineMicrobiologyPediatricsPublic Health
  • SanitationreachesEnvironmental ScienceMicrobiology
  • BiosafetyreachesToxicology

Examples across disciplines

Public Health

Vaccination, hygiene, ventilation and isolation each cut transmission a little.

Microbiology

Lab biosafety layers facility, equipment, practices and PPE (BMBL).

Computer Science

Firewalls, authentication, encryption and monitoring layered so one breach is not enough.

Engineering

Redundant, independent systems so a single failure is not catastrophic.

How this pattern travels

Interpreted from where the pattern recurs in the atlas — structural transfer and coverage, not a claim it is universally the "best" model.

  • Recurs across 5 disciplines over 4 carrier concepts — concentrated (75% of carriers in one field).

    structural · Structural recurrence in the atlas — a pattern is a reasoning lens, not a law.

  • 1 of its 4 carrier concepts are themselves cross-disciplinary connectors.

    structural · Structural recurrence in the atlas — a pattern is a reasoning lens, not a law.

  • Explicit "where it breaks" notes exist for 0 of 4 annotated assignments.

    curated · Curated boundary annotations — absence is a representation gap, not evidence the model has no limits.

  • Currently dark in the atlas: no origin recorded · no assignment cites a source · no boundary annotations.

    atlas representation · Describes the current Thinking OS representation, not the model itself.

Coverage matrix

How these concepts distribute across domains and concept families — real counts, not a score.

SystemsInformationMatterChangePatternsEnergyLifeScaleStructureDecisionNetworksWavesCausalityComputationEarthSpaceOptimizationNumberProbabilitySecurityThresholdsConstraintsNatural sciencesFormal sciencesEngineeringMedicine & healthSocial sciencesHumanitiesProfessionalArtsInterdisciplinary31

The statistical fingerprint

How the 4 concepts that exercise this pattern distribute — from the graph, not a ranking.

Disciplinary fingerprint

Carrier concepts under each illuminating lens.

How settled its carriers are

Epistemic status of the concepts that exercise this pattern.

  • Established4 · 100%

Technical detail

Defense in depth treats reliability as a system property: with n independent barriers each failing with probability pᵢ, the chance all fail together is the product ∏pᵢ, which is tiny when the barriers are truly independent. The engineering caveat is that shared failure modes (a common cause defeating several layers at once) break the independence assumption — which is exactly what the Swiss-cheese model warns about.

Common misconception

A strong enough single barrier is sufficient. In reality every barrier has holes; safety comes from independent layers whose holes rarely align — the Swiss-cheese model.

Try a transfer challenge

You have seen this model in one place. Where else could it apply — and where would the analogy break?

Biosafety
The intuition

Assume every safeguard will sometimes fail. Arrange several that fail in different ways, so their weak spots rarely line up.

The reach of this pattern
  • Recurs across 5 disciplines.
  • 8 concepts exercise this thinking pattern.

Derived from the graph — a pattern is a reasoning lens, not a law.

How to recognise it

If this one safeguard failed right now, would anything else still stop the harm — and do the layers fail independently?

Keep this question handy when you meet something new — it helps you notice the pattern, not just name it.