6 Questions from Episode 7 with Rodney Rocha on the Inverted Burden of Proof

Episode 7 of Headline Podcast, published on October 9, 2025, features Rodney Rocha, a retired NASA chief engineer who served on the Columbia debris assessment team.

His central argument is uncomfortable for leaders because psychological safety fails when organizations demand proof that a condition is unsafe before they permit people to stop, question, or escalate the work.

What does Episode 7 change about speaking up?

Rodney Rocha's story changes the question from whether an engineer was persuasive enough to whether the organization made truth easy to hear. That distinction matters in every high-risk operation, because a warning can be technically correct and still disappear when the system expects certainty from the person raising it.

In the conversation with Andreza Araujo and Dr. Megan Tranter, Rocha describes a professional habit that reverses the safer burden of proof. Teams are often asked to show that something is unsafe, even when the available evidence is incomplete. A safer decision rule asks whether the organization has enough evidence to show that continuing is safe enough for the people exposed to the consequence.

The difference is not semantic. It determines who carries the cost of uncertainty. When the person who raises the concern must prove the danger, silence becomes a rational response for anyone whose position, credibility, or career is at risk.

Why does the burden of proof shape psychological safety?

The burden of proof shapes psychological safety because it tells people what kind of uncertainty they are allowed to bring forward. If a concern is welcomed only after it has been converted into a complete technical case, people learn to wait, soften the language, or keep the concern to themselves while they gather evidence that may never become available.

That pattern conflicts with the prevention logic described in OSHA's safety-management guidance, which recommends worker participation in identifying and correcting hazards. Participation cannot be meaningful when workers are invited to speak but are required to prove the outcome before leadership will act.

Andreza Araujo has made a related point in Sorte ou Capacidade, where open communication is treated as a safety layer rather than a courtesy. The practical test is simple. Can a person say, “I do not know what this means yet, but it does not look safe enough,” and still receive support?

Where do warnings lose force as they move upward?

Warnings lose force when each management layer translates uncertainty into a cleaner sentence before passing it upward. The first report may contain hesitation, context, and a specific observation. By the time it reaches an executive review, it can become a neutral phrase such as “no confirmed issue,” which sounds responsible while removing the reason for concern.

Rocha's account shows why leaders should inspect the path a warning takes, not only the final decision. Ask who first noticed the condition, what language they used, what evidence was added, which objections were removed, and whether the person who raised the issue saw the final record.

This is closely related to the frictions that keep expert warnings out of decisions. A mature response system does not require every voice to sound executive before it becomes actionable. It preserves the original uncertainty so that decision-makers can see what is known, what is assumed, and what remains unresolved.

What does a safety-ready decision record look like?

A safety-ready decision record makes uncertainty visible and assigns an owner to reduce it. It does not pretend that a green status means the question has disappeared. The record should show the concern, the evidence available at the time, the assumptions used, the consequence of being wrong, the temporary boundary, and the person authorized to reopen the decision.

Leaders can use five fields without turning the process into paperwork for its own sake.

• Concern: what was observed, by whom, and under which operating conditions.
• Uncertainty: what the team cannot yet explain or verify.
• Exposure: who may carry the consequence if the assumption fails.
• Decision: what will continue, pause, change, or receive an additional control.
• Reopen trigger: what new information requires the decision to be reviewed.

NIOSH's public safety resources frame prevention as an organizational responsibility, which is why the decision record belongs with the authority that can change the conditions, not only with the person who reported them.

How should leaders compare proof-before-action with proof-before-stop?

The two decision rules appear similar during routine work, yet they produce different behavior when evidence is incomplete. The comparison below makes the cultural signal visible.

ISO 45001 describes a management system in which hazards, risks, worker participation, and continual improvement are connected. That connection is weakened when leaders treat uncertainty as an interruption rather than as information that should influence the next decision.

How can executives test whether people can tell the truth?

Executives do not need another slogan to test psychological safety. They need evidence from the moments when a concern creates friction. Review a sample of recent escalations and ask whether the person who raised each issue received a response, whether the original wording survived, and whether the decision changed the work or merely closed the record.

Use the four states of a speak-up response as a practical lens. A report can be heard, acknowledged, acted on, or dismissed. Those states are not interchangeable, and a closed ticket does not show that the underlying risk was controlled.

The speak-up check-in format also helps leaders observe whether questions are answered with curiosity or with a demand for certainty. A manager who asks, “What would make you more confident that this is safe enough?” opens a different conversation from one who asks, “Can you prove that this will fail?”

Recommendation

Adopt a proof-before-action rule for safety-critical uncertainty, then test it in one decision process that already carries operational pressure. Preserve the original warning, name the exposed people, record the assumptions, set a temporary boundary, and give the reporter a visible response.

Andreza Araujo's work on safety culture returns to the same practical point: information protects people only when the organization lets it travel. Episode 7 adds a sharper test. If a worker must become certain before a leader becomes curious, the system is not psychologically safe enough for high-consequence work.

Rodney Rocha's message is not that every concern should stop every operation. It is that leadership must carry the responsibility for deciding how much uncertainty is acceptable, because the people closest to the work rarely possess the authority or the evidence needed to prove the future.

Listen to the full Episode 7 conversation with Rodney Rocha and share it with a leader who needs better questions before the next warning reaches the boardroom.

FAQ

What is the inverted burden of proof in safety decisions?

It is the practice of asking a person who raises a concern to prove that the work is unsafe before leadership will pause or change it. A safer approach asks whether the available evidence is sufficient to show that continuing is safe enough for the people exposed.

How does the burden of proof affect psychological safety?

It affects whether people believe uncertainty is welcome. When leaders demand certainty before they respond, workers learn to delay, soften, or withhold information that could have prevented harm.

What should a safety decision record include?

It should preserve the original concern, state what is uncertain, identify who is exposed, record the decision and its assumptions, and define the trigger that will reopen the question.

Should every warning stop the operation?

No. Every warning should change the quality of the decision. Leaders should determine whether to pause, add a control, narrow the exposure, or continue with a documented reason and a clear review trigger.

Where can I hear Rodney Rocha discuss the Columbia assessment?

Rodney Rocha discusses organizational silence, uncertainty, and the burden of proof in Episode 7 of Headline Podcast, published on October 9, 2025. Listen to the full conversation.