Drift

Conditions change continuously. Markets reprice, regulations move, the population an institution serves turns over, the technical ground underneath a practice changes. An institution oriented to reality tracks that change and adjusts against it. An institution that stops tracking continues on its last good heading, and the distance between where it believes it is and where it actually is widens unnoticed.

Drift is the widening discrepancy between what an institution understands and the conditions it actually faces. It accumulates whenever the institution stops tracking the change and continues on its last good reading. The first symptom is a position kept too long: the institution keeps its heading while the reference that heading was set against goes on changing. Beneath the symptom is the discrepancy, growing. The institution registers no alarm, because internally everything agrees. The agreement is the problem.

A healthy institution exhibits both. Its people concur, its procedures align, its records reconcile, and all of that internal coherence tracks something real outside the walls. The two travel together, so no one separates them.

A drifting institution exhibits the first while losing the second, and it can grow more coherent as it does. Most people expect failure to announce itself through disagreement and disorder. A drifting institution behaves the other way: everyone still agrees, procedure is still followed, the forms are signed, the vocabulary is shared, the conclusions reconcile. Each of these is genuine. The institution is generating real evidence of its own health, and every piece of that evidence is internal. The reference point that would test it is external, and contact with that reference has weakened.

Institutions conflate the two continuously. Unanimous sign-off reads as confirmation that a decision is correct. It confirms that the people signing concur. Whether their shared conclusion still corresponds to the conditions outside is a separate question, and it is the question drift erases.

Drift is present at all times, because the conditions an institution navigates against never sit still. The only defense is continuous attention to the external reference. Take that attention away and the institution does not stop drifting. It travels with whatever forces are acting on it, away from correspondence, while its instruments read steady.

The precipitating events look ordinary the entire way down. An exception gets handled. A standard gets interpreted generously. A measurement comes in slightly off and gets processed. Each step reads as competence. The threshold that turns accumulated drift into failure arrives through the gradual removal of the things that were absorbing it, and the crossing leaves no mark at the time it occurs.

Drift in a single reference does not stay local. Downstream functions measure their own position against the drifted one, treat it as correct, and adjust toward it. The error compounds as it spreads, and because each step is a reasonable adjustment to a trusted input, no individual step looks wrong.

Formation flight shows the mechanism plainly. The lead aircraft is responsible for tracking the world outside, navigating and watching for other traffic, while each wingman holds position against the lead. That division is the design, and it works as long as the lead keeps contact with the external reference. Let the lead drift, and every wingman follows it precisely, holding perfect position against a ship that is no longer where the outside world would put it. The same failure occurs when a wingman mistakes a drifting neighbor for the lead. In both cases the formation does exactly what formation requires, and the error travels through the whole flight before anyone has named it.

A drifting institution produces failures that look like discrete incidents, each with its own investigation and its own correction. When the same failure returns on a schedule, the schedule is the diagnostic. The rhythm has a cause: a correction resets the institution to a baseline, the external reference keeps changing at a roughly constant rate, and so the time it takes to drift back into failure stays about the same. A stable interval between recurrences means the force producing them is still active and the corrections have addressed expressions instead of the rate of drift. A lengthening interval means something upstream is being reached. An interval that disappears means the cause itself was corrected.

Most institutional correction targets the event. The investigation explains what happened, the procedure changes, the records show a response. The force that produced the drift continues acting, and the interval expires again on its own clock.

Verification in an oriented institution tests correspondence. The records get read against the situation outside, and the assumptions behind each decision get tested against current conditions. As drift accumulates, verification gradually changes its question. The check that once asked whether the records are accurate settles into asking whether the records agree with each other.

A consistency check passes wherever documentation reconciles internally. An audit of procedure passes wherever procedure was followed. Both execute correctly. Both return clean results. Both sit one layer downstream of the question that would expose the drift, which is whether the institution's understanding still corresponds to the reality it was built to track. Answering that question requires contact with the external reference, and contact is the thing drift has been eroding the entire time.

The clean audit in the period before a failure breaks into view is not a contradiction. It is drift working as drift works.