A data network that feeds air traffic control across Italy developed faults overnight.

Controllers kept full capacity until morning traffic built. Then they cut the number of planes they would handle to half. A satellite backup later raised that to three-quarters. Full capacity returned the same day. It was not a cyber attack. It was a single network that could not carry the load.

Most companies run the same way. One process. One supplier. One data path. One cash rhythm. It works until the volume rises or the part fails. Then the choice is forced. Slow the flow or risk the outcome.

Designed for Volatility starts with the safe core. Keep the part that must not fail small, clear, and protected. In this case the core was the decision to protect separation and safety first. Everything else could wait. The satellite path was modular. It was not the main system. It was an independent piece that could take part of the load while the primary path was repaired. That is the difference between one block and pieces that can stand alone.

Via negativa means remove what breaks you before you add more. Cutting capacity removed the risk that the network would drop planes or confuse controllers. Extra capacity would have hidden the weakness longer. Skin in the game is simple. The people who own the outcome decide the limit. Passengers and crews were the customers. Their safety ranked ahead of schedule completion.

The same logic applies inside any operating system of people, cash, customers, and suppliers. Map the single paths that stop the whole company if they fail. Give the core its own protection. Keep small, independent options that can absorb stress without collapsing the rest. When a stress arrives, cut what is fragile before you scale what is not proven. The stress itself shows which pieces get stronger and which must be abandoned.

Companies that treat the operating system this way do not just survive the next fault. They finish the day with clearer limits, better backups, and fewer hidden single points. The next stress finds less to break.