Executives, division heads, and senior leaders at the Federal Aviation Administration do not compete for authority by saying they want power. They compete by invoking languages of Safety First, Risk-Based Regulation, NextGen Modernization, or responsibility for sustaining a safe and efficient national airspace inside a hyper-complex, post-deregulation, post-9/11, and now AI-disrupted aviation environment. This is the core insight of David Pinsof’s Alliance Theory. Institutional vocabularies are coalition technologies. They recruit allies, define legitimacy, and justify control over aircraft certification pipelines, air traffic control towers, regulatory enforcement actions, airport infrastructure grants, drone integration, and the invisible networks of safety data, incident reports, and compliance audits. At the FAA, the key language is not only operational. It is also cultural and existential. Safety First. Risk-Based. Modernization. These phrases do not merely describe practice. They define jurisdiction. They determine who gets to say what kind of FAA the agency can sustain, how rigorous that safety culture should remain between the innovation imperative and the regulatory discipline that aviation physically requires, and which forms of adaptation still count as faithful to what the agency is.
Before the analysis proceeds, the framework needs a limit acknowledged, and this limit matters more here than anywhere else in this series. Alliance Theory, applied without restraint, becomes a closed system. When every position gets decoded as a power move, the analysis loses precision. The air traffic controller who stays focused through a four-hour shift managing separation between aircraft she cannot see is not primarily executing a coalition maneuver. She is preventing metal from meeting metal. The certification engineer who structures his week around compliance reviews years after promotion because he knows it protects the traveling public inhabits a world whose demands are real, not merely performed. Safety First is not only rhetorical. It names a genuine physical constraint that aviation imposes on everyone inside the institution regardless of their coalition loyalties. Planes crash or they do not. Separation holds or it does not. That hard feedback loop distinguishes the FAA from every other institution in this series. Unlike the Journal, which can drift from accountability for years before readers notice, or Amazon, which can substitute proxy metrics for customer value across entire product categories, the FAA operates under a constraint that periodically forces the gap between language and reality into catastrophic visibility. Alliance Theory names something real about how institutional authority functions inside the FAA. It is not the whole picture, and here the remainder matters more than usual.
Ernest Becker argues in The Denial of Death that human beings are unique among animals in their awareness of their own mortality, and that most of human culture, religion, and social life organizes itself to manage the terror that awareness produces. We construct hero systems, cultural frameworks that promise symbolic immortality, that tell us our lives participate in something larger and more permanent than our individual bodies. To be a faithful member of a hero system is to transcend death symbolically. To lose one’s hero system is to be thrown back against the terror it was built to contain.
The FAA is a hero system organized around a specific and unusual fear. The deepest terror the institution manages is not death in the biological sense. It is Another 737 MAX. It is systemic failure: a mid-air collision, a certification collapse, a staffing crisis that turns the national airspace into a zone of managed catastrophe. Safety First is not merely a strategic posture or a managerial aspiration. It is a defense against a particular kind of institutional annihilation, the collective refusal to allow the agency to calcify into the kind of regulator that mistakes process for outcome, political pressure for prudence, and diversity metrics for airworthiness. Every risk assessment ritual, every incident review, every certification audit is the hero system doing its maintenance work: interrupting the drift toward regulatory capture or bureaucratic complacency that the institution’s own scale and political environment continuously produce. The Beckerian bargain the FAA offers its professionals is this: your individual career, lived seriously within this framework of vigilance and procedural discipline, participates in something permanent. You are not shuffling paper. You are keeping the sky safe for everyone who flies.
The deepest failure mode of this hero system is simulated vigilance. As the FAA has accumulated layers of congressional mandates, post-9/11 security expansion, equity initiatives, and modernization promises, the lived urgency of the safety imperative, the genuine conviction that every deviation from procedure is a step toward catastrophe, has become increasingly difficult to transmit as an institutional constant. What replaces it is the form of vigilance without the substance: ritualized safety audits that no longer generate the discomfort that produces genuine adaptation, certification reviews that reward facility with the documentation vocabulary rather than internalization of the engineering judgment the documentation was designed to capture, and diversity initiatives that reproduce the symbol of an improved workforce without necessarily producing the narrow cognitive specialization that zero-failure operations require. The danger is not that FAA professionals stop caring about safety. Most do not. The danger is that the institution builds a layer of process between professional judgment and safety reality thick enough that the two can quietly diverge without anyone in the system being positioned to see it.
Robert Trivers argued that natural selection favors not merely reciprocity but the ability to track, interpret, and manipulate social information about cooperation and betrayal better than others. Morality, in this framework, is not primarily a ledger of debts. It is a forensic system. At the FAA, metrics are not merely management tools. They are epistemology. The system has progressively shifted from using safety data to discipline behavior toward using safety data to define safety itself. What can be measured by an incident rate, a certification timeline, or a staffing ratio becomes real in the system’s operative sense. What cannot be measured, the tacit judgment that stops a technically compliant certification because something feels wrong, the institutional knowledge that understands why a particular aircraft behaves differently from the aggregate data, the long-horizon investment in controller expertise whose value will not appear in any quarterly dashboard, becomes progressively invisible.
This creates the shift from safety to proxy obsession. Leaders do not manage risk. They manage the variance in dashboards that represent risk at several removes from the actual experience of aircraft separation in real airspace. The proxy becomes the reality. The metric becomes the passenger. And when that happens, optimizing the metric is no longer the same as ensuring safety, though the institutional vocabulary continues to describe both activities with identical language. The specific and terrifying feature of this failure mode in aviation, as opposed to media or finance, is that it can persist invisibly for years before a single event makes the divergence undeniable.
Trivers’ deeper claim is that organisms deceive themselves to better deceive others. The FAA professionals who invoke Safety First as their primary decision criterion are not primarily performing. They believe it. That self-deception is load-bearing: an institution whose members have genuinely internalized the conviction that every decision should serve safety can sustain the metric regime with moral energy rather than mere compliance. But the self-deception also creates the specific failure mode that metric-as-epistemology produces. Once you have convinced yourself that a diversity hiring goal accurately represents improved safety culture, optimizing that goal feels like serving safety even when the two have diverged. The gap between the map and the territory becomes invisible precisely because the map has been invested with the moral weight that belongs to the territory. The 737 MAX certification failures were not primarily the product of bad people making cynical decisions. They were the product of professionals who had genuinely convinced themselves that their processes represented safety while those processes had quietly decoupled from the engineering reality the processes were designed to capture.
The signal layer and the cue layer at the FAA operate according to the governing logic this series has traced across every institution: signals maintain legitimacy while cues determine survival. Safety First, Risk-Based Regulation, and NextGen Modernization are the signal layer. Congressional appropriations, certification throughput rates, diversity hiring metrics, and political visibility are the cues. At the FAA, the divergence between signals and cues has a specific and important character: the agency is accountable simultaneously to physics and to politics, and those two accountability structures are not aligned. Physics demands that aircraft remain separated and that certified designs actually fly as modeled. Politics demands that the agency demonstrate progress, satisfy oversight committees, respond to equity concerns, and avoid becoming a target of either industry or advocacy groups. The agency survives by managing both simultaneously, which means continuously translating one vocabulary into the other. Safety First increasingly gets interpreted as defensible process. Risk-Based increasingly gets interpreted as political-risk avoidance. Modernization increasingly gets interpreted as sustainable bureaucratic expansion. The language remains unchanged. Its operative meaning has been adapted to authorize the cue-driven behavior that selection actually rewards.
The FAA is not one institution. It is four overlapping systems negotiating with each other under intense and competing pressures from the aviation industry, Congress, the White House, and the physical demands of a national airspace that carries roughly two million passengers a day.
The doctrine layer, anchored by Administrator Bryan Bedford and the safety philosophy accumulated across decades of NTSB investigations and near-miss analyses, defines what the agency is supposed to be. Bedford is a former airline executive, which makes him unusual among administrators. He understands the production pressure that aviation exerts and must enforce against the interests of the industry he came from. That creates a structural tension that defines his tenure: too aligned with industry and the capture narrative dominates; too restrictive and modernization stalls. His primary function is maintaining enough coherence in the institutional narrative that Safety First remains a genuine operational commitment rather than collapsing into a brand attribute. The history of the agency, its worst failures and its genuine achievements, functions as the eternal accountability summoner: the Tenerife disaster, the Aloha Airlines structural failure, the ValuJet crash, the MAX certification collapse. These prevent the doctrine layer from being fully captured by the commercial and political layers operating beneath it.
The constraint layer, anchored by the budget and compliance infrastructure under Chief Administrative Officer Donald Bornhorst, defines what the agency can actually do within fiscal and political realities. Because the January 2026 reorganization consolidated finance, IT, and human resources directly under the Administrator, Bornhorst now controls the resource flows that determine whether any reform is operational or merely rhetorical. Appropriations and audit outcomes decide which versions of safety investment survive and which get quietly deprioritized. The hero system is viable only if the constraint layer generates the budget that funds it. That is a silent but structurally dominant form of authority: Bornhorst does not define what the FAA should be, but he determines which definitions of what the FAA should be are fiscally sustainable.
The expansion layer, anchored by Paul Fontaine’s NextGen and airspace modernization portfolio alongside the certification infrastructure that Tina Amereihn oversees, defines where the agency can still grow in ways consistent with both doctrine and constraint. Modernization is the most dangerous institutional language the FAA uses, not because it is wrong but because it is always deferred. NextGen has been promised for decades. Satellite-based air traffic control remains partially delivered. The risk Fontaine’s role carries is that modernization becomes theater: symbolic progress measured in congressional presentations rather than operational transformation measured in actual system performance. Amereihn’s certification authority is where the expansion layer meets physical reality most directly. She must approve new technologies, certify new aircraft designs, and enable innovation while maintaining the safety standards the agency exists to enforce. She must allow risk in order to prevent risk. That paradox sits at the center of her role and cannot be resolved, only continuously managed.
The reproduction layer, anchored by the hiring, promotion, and performance management structures the agency uses to select and advance its workforce, defines who gets to belong. The Obama-era introduction of the biographical questionnaire as a screening tool for air traffic controller candidates is the clearest recent example of a deliberate intervention in this layer. The traditional pipeline, built around the Collegiate Training Initiative programs and the AT-SAT aptitude test, had co-adapted over decades for the specific and demanding cognitive profile that zero-failure ATC operations require: processing speed, spatial reasoning, stress tolerance, and the tacit safety judgment that experienced controllers describe as feeling rather than calculation. The biographical questionnaire was an attempt to cross that narrow pipeline with new genetic material, to produce a more demographically representative workforce by recruiting from outside the traditional selection environment. The result was textbook outbreeding depression. The co-adapted traits optimized for the ATC niche were disrupted without a compensating gain in breadth. Thousands of high-scoring CTI graduates were passed over. Lawsuits followed. Staffing shortages deepened. The organism did not gain vigor. It lost specialization without gaining resilience.
The DOGE-driven reforms now underway represent the counter-intervention: a forced rapid selection in what had become a slow-life bureaucratic organism. The firings of probationary employees, the merit resets, the dismantling of the equity infrastructure represent a new selection pressure applied faster than a slow-life system can absorb without disruption. The biological prediction is not improvement. It is motion: a burst of energy accompanied by the loss of institutional memory, an unpredictable pattern of trait survival, and a new equilibrium that will share more organizational DNA with the old superorganism than the reformers hope or the defenders fear.
The four castes that occupy the FAA’s operational structure illustrate the signal-cue divergence most clearly. Safety professionals in the certification and flight standards divisions use the vocabulary of Safety First to mean genuine engineering judgment about whether a design will behave as modeled under real operating conditions. Operational managers in the Air Traffic Organization use the same vocabulary to mean maintaining separation and flow in a system running three thousand controllers short of its staffing requirements. Policy professionals in the strategic engagement and congressional liaison offices use it to mean whatever framing of the agency’s work will survive the next oversight hearing. And translators in senior leadership use it to mean whatever is required to make a given decision legible across all three castes simultaneously. The moral vocabulary unifies the institution while concealing the divergent material interests it papers over.
The real tension underlying every jurisdictional contest at the FAA is not safety versus speed. It is tacit judgment versus legible compliance. Tacit judgment requires the freedom to stop a certification because something is wrong even when everything in the documentation is technically correct. It requires the experienced controller’s instinct that a particular traffic pattern is developing dangerously before the separation standard is technically violated. It requires the institutional capacity to act on what professionals know before it can be proven in a format that survives administrative review. Legible compliance requires metrics, documentation, audit trails, and the ability to defend every decision across layers of congressional and industry scrutiny. As the FAA faces continuous pressure from airlines, manufacturers, Congress, and now DOGE, the selection pressure for legibility increases continuously. Each compliance layer added after the last failure makes the system heavier. Each documentation requirement added to protect the agency against the next investigation makes tacit veto power harder to sustain. The most important safety mechanism in the agency is informal and unmeasurable, and it is exactly what the selection environment filters out.
The power hierarchy at the FAA does not follow the organizational chart. Real authority flows from the ability to stop things. Franklin McIntosh, as head of the Air Traffic Organization, controls the operational reality of the national airspace in real time. His world runs in seconds. He faces a shortage of roughly three thousand controllers and must keep aircraft moving without allowing that pressure to erode separation standards. His authority is physical. He controls the distance between metal and metal. Tina Amereihn controls the certification gate. Her decisions determine what flies. She manages the boundary between engineering innovation and engineering catastrophe and must distrust the data that comes to her from the factories even when the factories have every incentive to present it as complete. Bedford sits above both, managing the distributed veto capacity of the agency under shifting political pressure and with a commercial background that his industry interlocutors understand and his safety professionals watch carefully.
The succession challenge at the FAA has a specific character that differs from every other institution in this series. Bedford’s task is not simply to maintain the safety culture the agency inherited. It is to determine whether a hero system built around the genuine terror of catastrophic failure can survive translation into the institutional psychology of an agency that is simultaneously a safety regulator, a technology modernizer, a political actor, and a workforce manager under DOGE pressure. The summons weakens when language feels detached from reality, when metrics replace judgment, when Safety First becomes a compliance identity rather than an operational conviction. When that happens, controllers stop being called into the agency by the weight of what the work means. They start managing careers, optimizing internally, following procedures that represent safety rather than procedures that produce it. That is the beginning of institutional degradation, and it looks from the outside, for a long time, exactly like normal successful operation. It looks that way right up until it does not.
The jurisdictional contest at the FAA is constrained by something that no other institution in this series faces with the same directness. Aircraft either remain separated or they do not. Certification decisions either align with the physics of flight or they do not. Coalition vocabularies shape authority and allocate attention, but they cannot permanently substitute for the underlying system’s interaction with physical reality. The danger is not that the FAA abandons safety. Most of the people inside the agency carry genuine commitment to the work. The danger is that the institution builds enough process between professional judgment and physical reality that compliance becomes a substitute for judgment, and the gap accumulates invisibly until it is corrected not by internal adaptation but by external shock. The system survives by maintaining a moving compromise between political legitimacy and operational truth. That balance can never be fully stabilized, and the price of mistaking stability for safety is paid by people who were never part of the negotiation.
Reality does not care about the vocabulary. It selects for fitness and discards everything else. In aviation, the selection interval is measured not in quarterly earnings reports or subscription churn rates but in the distance between two aircraft in shared airspace. That distance is either sufficient or it is not. The FAA exists to ensure that it is, and the entire institutional apparatus described here, the coalition languages, the caste structures, the signal-cue divergences, the selection mechanisms, the hero system and its failure modes, exists in permanent tension with that single, non-negotiable physical fact.
- https://PayPal.Me/lukeisback
"Luke Ford reports all of the 'juicy' quotes, and has been doing it for years." (Marc B. Shapiro)
"This guy knows all the gossip, the ins and outs, the lashon hara of the Orthodox world. He’s an [expert] in... all the inner workings of the Orthodox world." (Rabbi Aaron Rakeffet-Rothkoff) LATEST POSTS:
- The Answered Letter: A Hero-System Essay on Philosopher Gary Chartier
- The Good Report
- I Watched Craig Van Rooyen Soar
- The Heaven He Could Reach With His Hands
- Liza by the Curb
- Bob Burge Draws The Line
- Chuck Evans and the Sacred Body
- The Boy Who Did the Right Things
- God Comes First, and Sports Comes Second
- The Sportswriter
- Live
- The Whole Cup
- Mulholland Drive
- Good Evening, Folks
- The Joe Starkey Hero System
- Mike Adamle and the Meaning of Heart
- Special Progress
- Amy Gutmann: A Life in Democratic Theory
- NYT: ‘Searching for Clues in Jeffrey Epstein’s Boyhood’
- Who Has Discussed Realist Anthropology in Polite Society?
BEST POSTS:
* American Epistemics (1-19-26)
* The Most Socially Toxic Inconvenient Truths (1-18-26)
* The Luke Ford Genre (1-18-26)
* The Filkins Pivot: Legacy Prestige and the Fracturing of the Chattering Class (1-16-26)
* Decoding The Trump Doctrine (1-4-26)
* If Tatiana Schlossberg were “Tatiana Smith” (12-30-25)
* ‘I’m So Trained’: How The Credential Society Burned Down the Palisades (12-28-25)
* Status Closure and The Lost Generation (12-25-25)
* The Bondi Massacre (12-15-25)
* Sydney Jews Learn That Their Aussie Social Contract Has Become A Suicide Pact (12-15-25)
* Terror in Sydney: Analyzing the “Chanukah by the Sea” Massacre (12-14-25)
* Decoding Nick Fuentes (11-2-25)
* The Landscape of Emotional Sobriety (10-29-30)
* The Rise & Fall Of Air Supply (10-19-25)
* No Kings, No Results: How Elite Pride Replaced Real Progress (10-19-25)
* You Are An Important Soldier In A Great War (9-7-25)
* The Revolt Of The Masses (8-31-25)
* The Covenant of Ashwood (8-24-25)
* If you can’t trust central bankers, then who can you trust? (8-23-25)
* Why Is The Elite Media Singing From The Same Hymnal About The Trump-Putin Summit? (8-17-25)
* Why Do Smart News Operations Sound So Uniformly Dumb So Often? (8-16-25)
* Nobody Is Coming (8-10-25)
* When Elites Restrict Our Speech, It’s Because They Love Truth, Freedom & Democracy (8-3-25)
