16. Org Design Observations
There were no perfect examples to guide how to organize the thousands of people in the Founding Century of Mars. Not back then in the early-mid twenty-first century.
That was the first honest thing we said out loud in Port Harmonia’s borrowed conference room while the dust hissed against the hab’s skin. Earth offered glorious fragments — race car pit lanes and carrier decks, cleanrooms and polar depots, locker rooms that smelled of liniment and triumph — but nothing whole enough to airdrop onto Mars.
So we did the only sensible thing: we stole widely, welded shamelessly, and tested until the seams held. I was one of the droids keeping score and carrying clipboards the color of hazard tape. What follows is how six Earth institutions lent us their best bones.
♦
Formula One should be discussed first — not because racing has anything to do with oxygen beyond fuel-air mix ratios, but because the system rhythm is perfect. Design, build, test, learn, repeat — every week, then every day, then every lap. The trackside garage runs on short loops and long memory. You turn up with a hypothesis, and the car tells you if you were wrong before lunch.
What we took: the weekend cadence. Tiered briefings tied to real hardware: FP1 is your first fire-up; qualifying is your high-risk change window; the race is operations under pressure. Reliability has a clear veto, and subtle upgrades arrive only when the pit wall and factory agree the fix is ready, not when the calendar says “new.” We copied the spares ladders, too — A-kits that never leave the line of sight, B-kits that live one room away, C-kits that can arrive later without killing you. And we stole the split brain: trackside (field) versus factory (base), coupled by live telemetry and a shared vocabulary so tight even a sleepy night shift can speak it.
On Mars this became lifelines dashboards piping into Mission Command & Control (MCC); it became “slice black-starts” on a fixed cadence; it became the rule that status is demonstrated, not narrated. The desert of our planet rewarded teams that could change the car without changing the driver.
♦
U.S. nuclear aircraft carriers (minus the weapons) offered the other thing Formula One lacked: choreography at civilizational scale. Deck operations taught us that parallel command can work when you draw the handshakes in peacetime. The ship runs one spine — engineering, energy, water, waste, the hull itself. The air wing runs another — sorties, turnarounds, fuel, the clock. On the deck, color-coded humans move like an algorithm made of muscle and trust.
What we took: dual clocks with pre-wired handshakes. Port Harmonia had a base tempo — three shifts, steady as a heart — and a flightline tempo that pulsed with windows and range states. We assigned authority by mode (routine vs incident) and practiced the switch. We borrowed the deck colors — not literally, but in the sense that roles are visible at a glance. Our SIMOPS boards owed their bones to the carrier’s Ouija board: you don’t just ask permission; you see the dance. We also stole the ship’s respect for maintenance arithmetic: the seat-bill for 24/7 posts is physics, not opinion. You pay it first.
The carriers saved us from arguments that would have killed us: who decides on the line; who owns turnarounds; what “clear deck” actually means when one mistake can peel a dome like fruit.
♦
Antarctic bases — McMurdo, South Pole, and the cheerful lunacy of the overland traverse — taught us to love the calendar and fear it. Down there, logistics isn’t a helpdesk; it’s a religion with depots for cathedrals. Winters are isolation rehearsals; summers are campaign seasons with their own vocabulary: pre-positioning, backhaul, cold chain, wind halt.
What we took: seasonal thinking as a talent. We treated synodic windows like holidays with paperwork. Campaign teams formed, trained, executed, and stood down with after-actions that fed the next year. Depots mattered. Kitting mattered. We learned to count touches and hate them. The traverse mindset — nothing new for 90 days, make peace with it — gave our planners spine. And we stole winter-over staffing logic: who can stay, what must be duplicated, what can be mothballed without dying.
From the ice we also borrowed humility: you can’t fix the weather, so you fix the choreography. We stopped fantasizing that emergency airlift was a plan. Mars liked that.
♦
SpaceX gave us the courage to bet on single-threaded technical ownership. One owner per system. Names on drawings. Names on failure closeouts. People you could wake at 03:12 without shame. We stole the five unromantic verbs: question, delete, simplify, accelerate, automate last. It sounds like a poster until your air plant lies about being fine.
What we took: chief-engineer accountability over committee fog. Responsible Design Engineer paired with Responsible Manufacturing Engineer. Manufacturing-led design; engineers on the floor, not in a tower. Lightweight but enforced management-of-change with rollback plans written like tickets to a concert — date, seat, exit route — so you can put the venue back the way you found it when the song goes wrong. And we took FRACAS not as software but as civic religion: failure as harvest, corrective actions as currency, verification as the only applause that counts.
If Formula One taught us to learn quickly, SpaceX taught us to own our choices in ink.
♦
Semiconductor fabs — and, in a different accent, Tesla’s factories — taught us that cleanliness is governance. Fabs don’t negotiate with contamination, and they don’t tolerate “as-intended” diverging from “as-built.” Tool uptime is a deity. Statistical process control is the liturgy. Tesla added the ruthless poetry of deletion: giga-cast instead of assemble; unbox the line so flow beats choreography’s overhead.
What we took: a digital source of truth that reconciled continuously. Materials with identity and genealogy. Permit-to-work that was also a choreography map. Kitting to point-of-use so the line didn’t have to interpret a warehouse’s conscience. We embraced condition-based maintenance over calendar superstition: vibration and temperature leading indicator alarms instead of rituals performed “just because.” And from Tesla specifically, the courage to say “automation last.” Manual → semi-auto → auto, with promotion contingent on boredom. If an operation isn’t boring, it isn’t ready for a robot; it isn’t even ready for a label.
From these places we learned that simplicity is a safety feature. Delete the step and you delete a failure mode, a training cost, and a bad mood.
♦
Premier sports teams — choose your code, choose your city — gave us something the factories and carriers could not: a humane vocabulary for performance that doesn’t break people. The best teams rotate without breaking rhythm; they review without humiliation; they name roles with clarity and forgive mistakes that happen inside the plan. A star team, not a team of stars.
What we took: rota equity and currency. Handover rituals that combined numbers with plain speech. Coaches who are really instructors: leaders with line-of-sight, physically at the constraint. After-action reviews as habit, not punishment. And we took the invisible work: sleep hygiene, nutrition, recovery. “Rest is a control” moved from PowerPoint joke to operational gate. If your fatigue index is red, you don’t touch the critical system; no speech can change that state.
From sport we also learned to prize versatility without overloading souls. Dual-hats were not a budget trick; they were a way to keep the squad adaptable and proud.
♦
Six institutions. Six gifts. Not one of them a template. What mattered was the way they harmonized once we stripped the romance and kept the physics.
Now, if you’re building anything that breathes in thin air — literal or metaphorical — you will still ask for cross-cutting set of learnings. Here are the ones we took a baseline we knew our Mars organization had to observe.
Autonomy with auditability. Empowered teams are not optional on Mars; latency punishes permission cultures. But autonomy without records is merely improvisation with better lighting. We made every significant action leave a signed artifact: a log entry, a permit, a MoC. The rule wasn’t “ask first.” The rule was “decide inside your envelope, then leave the map for the next person.” When an incident came, the audit trail was not blame fuel; it was memory.
Short loops, long memory. We shortened the distance between hypothesis and hardware: drills, slice tests, scheduled outages for risky change. And we stretched memory with FRACAS and libraries of after-actions that were actually read because they were short, numbered, and tied to standards that changed when the words did. If the lesson doesn’t move a spec, it isn’t a lesson; it’s a campfire story.
Make the choreography visible. Permits, SIMOPS boards, deck states, range states — anything that affects two teams at once must be seen, not inferred. We used color and magnets, not mystery. We standardized call-and-response for any task where noise, PPE, or latency could mangle language. Visibility reduces collisions and flattens seniority; the magnet doesn’t care about your title.
Protect the critical path. Turnarounds, lifeline outages, synodic windows: they got the calendar first. Everything else negotiated with reality. This sounds obvious until a charismatic project tries to “borrow” an outage or a rehearsed drill. The carriers taught us: launch and recovery own the day; the deck does not share.
Delete before you optimize. Every review answered “what did we remove?” before “what did we refine?” Engineers earned disproportionate status for subtraction. Deletion shrank training loads, spare inventories, and the length of bad days. Optimization came second; automation, last. You cannot automate a moving target and expect dignity.
Name the interface owner. We killed councils by naming humans. Every boundary — mechanical, electrical, software, process — had a steward with a phone that rang in the night. Ownership shrank “hallway arbitration,” which on Mars means “nobody’s problem until it kills you.”
Design to the cap. Mass, power, headcount, budget — caps weren’t suggestions. We treated them like gravity. Program reviews were trading sessions: what we move, what we accept, who signs the risk. People stop arguing with gravity when you make it visible and fair.
Intent over instructions. Remote HQ alignment without remote control requires a truce: we will tell you what effect we need and what red lines we honor; you will choose the route that suits the terrain in front of you. We kept a standard status pack so the home team could understand without reaching for the joystick.
Rota equity and skill currency. We didn’t love hero throughput. We loved fresh hands and current certs. Currency lapsed to red if secondary hours weren’t logged. Night shift wasn’t a shadow realm; inspections landed there on purpose. People worked hard, but on the right thing, and with the right rest.
Incident modes on purpose. We adopted ICS because it scales panic into roles and spans of control. Routine mode: the line rules. Incident mode: the incident commander holds a small universe. Pre-typed resources, pre-printed vests, pre-agreed words. We practiced the switch until it was boring. Boring is good when the alarm rings.
Proximity over unit price. The Antarctic ledger made this inevitable: being near beats being cheap. We colocated shops, embedded supplier reps, and accepted slightly worse nominal costs in exchange for drastically better loops. On Mars, the expensive part is waiting.
Manual → semi-auto → auto. The ladder matters. When we climbed too early, we paid in brittle code and angry operators. When we climbed on time, takt went up and tempers down. The promotion rule was simple: if a human is still discovering the work, a robot will merely memorize our confusion.
♦
That is what these organizations gave us: not romance, not slogans, but guides that we should consider when trying to get a fragile place behave like it meant to survive.
With these we built a small set of Mars Organizing Principles — sharper than anecdotes, humbler than doctrine — that we used to guide us in those first decades as we built from a small base camp to a village, and ultimately a city and new world.
