alt Hacker NewsI am deeply suspicious of "blameless" post mortems. I agree that we should work in ways that minimize fear. We should, to some degree, celebrate the learning we glean from our failures.
But I keep seeing "blameless" being construed as lying about why something happened. It's construed in such as way that anyone can hide from their misdeeds. People screw up, and we need to hold them accountable, and THEY need to hold THEMSELVES accountable. Not necessarily with "punishment" (what does that even mean in a professional context) but perhaps atonement and retraining.
Replies
I'm nearly wrapping up Sydney Dekker's book _Just Culture_, and Allspaw has a few pages in it. And preceding that is a section titled "blame-free is not accountability-free."
Accountability under Dekker's restorative justice model means providing a complete record of what happened, so the justice system can focus on who was harmed and who needs to repair that harm. In some ways I think they can end up mirroring the typical punitive justice system, when the person who needs to repair harm matches what we would call a guilty party in other circumstances. But the idea is not to lie about what happened! It's to expand the network of causality beyond a simple thought terminating "Bob did it" so we can address the systemic problems that led to Bob doing the wrong thing.
> Not necessarily with "punishment" (what does that even mean in a professional context)
A few options depending on profession:
1. Demotion 2. Pay cuts or fines 3. Firing 4. Loss of certification, thus preventing this person from ever working in the field again 5. Jail time, preventing this person from even being in society for some time, perhaps forever.
Dekker's book is full of examples of professionals facing all of the above consequences. If you don't think these punishments are applied to the SRE community Allspaw addressed when originally describing "blameless postmortems" then you probably want to read the all time highest upvoted post to /r/cscareerquestions, "Accidentally destroyed production database on first day of a job, and was told to leave, on top of this i was told by the CTO that they need to get legal involved, how screwed am i?"[1]
[1]: https://www.reddit.com/r/cscareerquestions/comments/6ez8ag/a...
Sometimes failure comes from inherent risks. Sometimes we don't know what we don't know. You can't account for every possible factor, you'll be stuck in analysis paralysis while the world moves on.
If we're speaking of a justice system in more general terms, I agree with your line of thinking. I believe that repairing the damage and reintegrating with society would be far more effective than incarceration or other forms of punishment. Fear is a seed, you reap what you sow.
(Yes there are extreme cases. Still the long-term goal should be to minimise harm, not bring punishment.)