recess recess

No. 04 Essay

Design is a decision, not a job title.

Every system makes some things easy, some hard and some impossible. Somebody decides which. Usually they don’t know they are doing it.

7 min read From Recess

Somebody decided three tickboxes and one confirmation prompt were enough to move nine hundred million dollars. Nobody called it design.

Start with a mistake, and decide whose it was

Predict before you look · August 2020

A team at Citibank needed to make a routine interest payment on a loan, a few million dollars. To route the money correctly, the software needed three separate override boxes ticked. They ticked one. The system read that as an instruction to pay off the whole loan.

Whose mistake was this?

Design is deciding what a system makes easy, hard and impossible

Every system already has those three properties, whether or not anybody chose them. A form has them. So does a contract, a timetable, a purchasing specification and the choice of which number a team is measured on.

The only question is whether somebody sat down and decided them on purpose. Mostly, nobody did.

This is wider than the everyday definition, deliberately. The test of a definition is what it lets you see. This one makes the Citibank screen a design decision, which it plainly was, and which no narrower definition can account for.

The decisions get made anyway, by whoever happens to be holding the pen.

A badly drawn screen isn’t needed for a disaster

From 1999, the British Post Office ran its branches on an accounting system called Horizon. It showed shortfalls of money that had never existed. That was a software defect, of the kind every large system has, and engineers could in principle have fixed it.

The disaster came from two decisions above the defect:

  • Subpostmasters were made personally liable for any shortfall the system reported.
  • In court, the computer’s record was treated as more reliable than the person in the dock.

~900

people prosecuted, 1999 to 2015

£1.8bn

set aside by the UK government for compensation

2024

the year an Act of Parliament quashed the convictions in bulk

No screen in that story was badly drawn. What ruined those lives was a decision about whose account of reality would count. Lawyers and executives took it, and none of them would have recognised it as a design question. It set what was easy, hard and impossible for hundreds of people, and nobody ever examined it on those terms.

So design is a kind of decision, not a profession

The word covers two things that overlap less than it suggests.

  • A job, with schools, portfolios and a labour market.
  • A role, held by whoever is actually deciding what a system makes easy, hard or impossible.

At Citibank the role was almost certainly held by a developer implementing a written requirement. At the Post Office, by lawyers and executives. Designers are people who sometimes get to make these decisions. In most organisations, they don’t.

Every role did its job, and one question had no owner

The flattering version says designers care about users and other roles don’t. That is false. Engineers care about users. Analysts care about users. Nobody sets out to build the wrong thing.

The useful version: roles differ by the question each one owns.

EngineerDoes it work as specified?

DeveloperCan we build it, and keep it running?

AnalystCan we tell whether it’s working?

ProductIs it worth building, now, for these people?

DesignWhat does it make easy, hard and impossible, and for whom?

Boeing’s MCAS software on the 737 MAX worked exactly as specified. It read its sensor, judged the aircraft to be stalling and pushed the nose down. It read one sensor, though the aircraft carried two, and nothing checked one against the other. The safety case assumed a crew would diagnose a misfire in about four seconds. 346 people died in two crashes.

The engineering was not defective. The specification was. Somebody needed to ask whether one sensor was enough, and what a crew would face meeting this for the first time with three other alarms going. That question appears to have belonged to nobody in particular.

A The analyst is right

Opt-out organ donation moved consent enormously

  • Registered consent rose from 4–27% to 86–100%
  • The effect is large and replicated
  • No error anywhere in the analysis

B The design question

Was consent the right number?

  • Across 35 countries, total transplants were statistically indistinguishable
  • The real constraints were intensive-care capacity and family refusal at the bedside

Neither column contains a mistake. The design question is whether the measure was right in the first place, and you cannot answer that from inside the measurement.

Name the question, and give it a deadline

On a good team it barely matters who asks the design question, only that somebody does. Plenty of engineers ask it. Hiring a designer is one way to make sure it gets asked. It isn’t the only way, and it doesn’t work on its own: plenty of teams have designers and still never ask it, because the designers arrive after the specification is locked.

The reliable version is plainer. Name the question, attach it to a decision point, and make somebody answer it in writing before the money is committed.

Take this with you

  • Design is deciding what a system makes easy, hard and impossible. Every system has those properties, chosen or not.
  • Most of those decisions are made by people without the title. The job title is a poor guide to who is designing.
  • Failures rarely sit in a wrong answer. They sit in a question nobody owned, so the answer arrived by default.

Somebody in your organisation is drawing the next three-tickbox screen this week. They will file it as a requirement.

Try this week

Take the last thing that went wrong on your team, and find the question nobody was asking.

  1. Write down what happened, in one sentence, without naming a person.
  2. Go through the five questions above. Which one did nobody own at the moment it mattered?
  3. Find the next decision point where that question will come up again, and put a name and a date next to it.

To mull over

  1. Which decisions in your organisation set what is easy, hard or impossible, but are never reviewed as design: a template, a default, a policy clause?
  2. If “designer” is a role rather than a job, who is the most influential designer you work with?
  3. When you blame a user for a mistake, what would you have to believe about the system for that blame to be fair?

Sources

  • In re Citibank August 11, 2020 Wire Transfers, S.D.N.Y. (2021); reversed, Second Circuit (2022).
  • House of Lords Library (2025). Post Office Horizon IT scandal. Post Office (Horizon System) Offences Act 2024.
  • NTSB safety recommendations on the Boeing 737 MAX (2019); KNKT final report (2019).
  • Johnson, E. J., & Goldstein, D. (2003). Do defaults save lives? Science, 302, 1338–1339.
  • Arshad, A., Anderson, B., & Sharif, A. (2019). Comparison of organ donation and transplantation rates between opt-out and opt-in systems. Kidney International, 95(6), 1453–1460.