Figure 25.9 The premortem, or red-team simulator. Rather than ask whether the plan might fail, it
assumes the plan has already failed and asks why—then examines the same plan from four fixed
angles: the customer, the operator, the adversary, and the future maintainer. Their findings are
de-duplicated and severity-ranked into one list, worst first (the top row, in accent). A clean
list is evidence the plan was stress-tested, not a guarantee that nothing was missed.
