It is always the rule nobody thought to write
The American nuclear rulebook was not written in advance. It was written afterward, in the wreckage, one surprise at a time — and never once about the accident the industry had been drilling for.
Markets are assembled the same way. Every rule governing trading, disclosure, and risk today exists because something happened that the people running the system considered impossible the week before it happened.
Five of them. The stories are worth telling properly, because the shape of each one should be familiar to anyone who has watched a portfolio.
The Candle
Below the control room at Browns Ferry there is a space called the cable spreading room, where thousands of electrical cables fan out from the panels above and run through the wall into the reactor building. The gaps around them were packed with polyurethane foam.
Two men were checking those seals for air leaks. The accepted method — the method everyone used, the method nobody questioned — was to hold up a lit candle and watch which way the flame bent.
The flame found the foam. They tried to beat it out and pushed it deeper into the wall instead. The fire got into the cable trays and traveled through into the reactor building, and it burned for roughly seven hours.
Somewhere around 1,600 cables were destroyed. Six hundred of them were safety cables. In the control room, indicator lights went dark and dead in banks, and the operators of Unit 1 discovered they had lost the emergency core cooling system entirely — the pumps, the controls, the ability to know what was happening. They kept water on the core by improvising with pumps that were never intended for the job.
Browns Ferry had defenses against every accident anyone had modeled. It had no rule about candles. Five years later the NRC published Appendix R, and fire protection became a nuclear engineering discipline, because two men had gone looking for a draft.
October 19, 1987. The Dow lost 22.6% in a single session with no news to explain it. The accelerant was portfolio insurance — a product sold to institutions as downside protection, which responded to falling prices by selling automatically, which pushed prices lower, which triggered more selling. The safeguard was the fire. Circuit breakers exist today for the same reason Appendix R does.
The thing installed to protect you is often the thing that propagates the failure.
The Light That Lied
At four in the morning, a blockage in a water-cleaning system shut down the feedwater pumps at Three Mile Island Unit 2. The turbine tripped. The reactor scrammed. All of that was normal. All of that was designed for.
Pressure spiked, and a relief valve on top of the pressurizer opened to vent it, exactly as intended. Then the valve stuck open. Reactor coolant began pouring out of the top of the system, and it kept pouring for more than two hours.
In the control room there was a light for that valve. The light was wired to the signal telling the valve to close — not to the valve. The signal had been sent. The light was off. As far as every man in that room could tell, the valve was shut.
What they saw instead was rising water level in the pressurizer, and they had been trained their entire careers never to let the pressurizer fill solid. So they did the responsible thing: they throttled back the emergency cooling water that the plant was automatically injecting into the core.
They starved the reactor to satisfy an instrument. About half the core melted. The containment held, and almost nothing got out, and it did not matter at all — the industry's future was decided anyway. Reactor orders stopped. And twelve days earlier, a film called The China Syndrome had opened in theaters, in which a fictional meltdown renders an area "the size of Pennsylvania" uninhabitable.
2008. The tranches were rated AAA. The risk models were green. What the rating actually reported was not the condition of the loans — it was the output of a model that had been told housing could not fall everywhere at once. Investors, like the operators at TMI, took action based on a readout that described the instruction rather than the reality. The light was off. The valve was open.
Your dashboard reports what it was built to report. It does not report what is true.