How Rodney Rocha Thinks About Assumptions Before Safety-Critical Decisions

Episode 7 of the Headline Podcast was published on October 9, 2025, with Rodney Rocha, a retired NASA chief engineer who served on the Columbia debris assessment team. His central argument changes how leaders should treat reasonable assumptions, because an assumption that feels safe enough can become the point where weak evidence is allowed to close a serious decision.

Rocha's lesson is not that every decision must wait for perfect information. It is that leaders must show which facts are known, which are inferred, who owns the uncertainty, and what would force the decision to be reopened.

Why do reasonable assumptions deserve executive attention?

Reasonable assumptions are statements that allow work to continue when direct evidence is incomplete. They are common in maintenance, engineering, emergency response, project delivery, and production planning, where a team often has minutes or hours rather than weeks to decide.

The danger appears when a reasonable assumption is treated as a verified fact. A missing inspection result becomes "probably acceptable," a weak signal becomes "within normal variation," and an unresolved warning becomes "not actionable yet." Each sentence sounds measured, yet the decision has quietly moved from evidence to confidence.

James Reason's work on latent and active failures helps explain why this matters. The person making the final call may be responding to conditions created by design choices, schedule pressure, reporting filters, or unclear ownership several layers away from the work.

Across 25+ years of executive EHS experience, Andreza Araujo has repeatedly connected safety culture with the quality of ordinary decisions. The question is not whether leaders use judgment. The question is whether the organization makes judgment visible enough to challenge.

What did Rodney Rocha say about the burden of proof?

Rocha described a professional habit that can reverse the burden of proof. Instead of asking a team to prove that a condition is safe enough to operate, the organization may demand that a concerned person prove that it is unsafe, even when the available information is incomplete.

On Headline Podcast, Rodney Rocha said, "Our profession's culture is to show it's safe enough to operate. You don't go the other way around and demand we prove it's unsafe, especially when we have hardly any information." That sentence gives leaders a practical test for escalation meetings.

If a warning is being dismissed because the person who raised it cannot prove the worst case, the decision process is asking the wrong question. A credible process asks what is known, what is missing, what consequence would matter, and which temporary control keeps people protected while the uncertainty is resolved.

Andreza Araujo's book Safety Culture: From Theory to Practice supports the same leadership distinction. Compliance records can show that a decision was documented, while the quality of the evidence determines whether the record represents control or only administrative closure.

How do assumptions hide uncertainty in normal work?

Uncertainty rarely arrives with a label. It enters through ordinary phrases such as "the previous inspection was fine," "the contractor knows the area," "the alarm has never failed," or "the material should be within specification." Each phrase may be true, but none answers whether the current condition has been verified.

A useful review separates four states. A fact has direct evidence. An inference connects evidence to a conclusion. An assumption fills a gap so work can continue. An unknown is a gap that the team has not yet characterized. Confusing those states makes a safety decision look more mature than it is.

For an EHS manager, the practical move is to mark the state beside each critical decision. Use a short register with 4 columns, namely statement, evidence, owner, and expiry condition. An assumption that has no owner and no expiry date is not a temporary bridge. It is a hidden permanent condition.

In more than 250 cultural transformation projects supported by Andreza Araujo's team, the recurring value of a visible decision is that it gives supervisors and executives something specific to challenge. "Do we know this?" is more useful than "Does everyone feel comfortable?"

Where do warnings weaken as they move upward?

A warning can lose force at every handoff. A technician reports an unusual condition, a supervisor summarizes it, an engineer translates it into a technical note, and a manager receives a short status line. By the fourth step, the uncertainty may have disappeared from the wording even though the physical condition has not changed.

The problem is not always bad intent. People compress information to meet a meeting format, protect a schedule, or avoid escalating a concern that appears incomplete. The result is a decision record that preserves the conclusion but loses the reason for doubt.

Leaders can test this with a 5-minute reconstruction. Ask the person closest to the work to state the original concern, then compare it with the sentence that reached the decision maker. If the concern, evidence gap, or requested action is missing, the communication chain has reduced decision quality.

Andreza Araujo's A Ilusao da Conformidade is a useful lens for this pattern. A form can be complete while the meaning of a warning has been softened during translation. The control is not another signature. It is preserving the decision-relevant uncertainty.

What should a leader ask before accepting "safe enough"?

"Safe enough" can be a valid operational conclusion when it is tied to defined limits, evidence, and a review trigger. It becomes dangerous when it is used as a conversational endpoint that prevents further questions.

Before accepting the conclusion, a leader should ask 6 questions. What evidence supports the decision? Which evidence is missing? What assumption carries the greatest consequence? Who can stop or pause the work? What temporary control protects people now? What new fact would reopen the decision?

These questions do not demand zero uncertainty. They create a boundary around uncertainty so that responsibility does not dissolve across the group. They also make the difference between a technical disagreement and a psychological-safety failure more visible.

In Make The Difference: Be a Leader in Health & Safety, Andreza Araujo emphasizes leadership that is felt in decisions, not only declared in policy. A supervisor who receives an incomplete warning and responds with curiosity is changing the next report before a campaign or training module is created.

How does the guest's view differ from the usual safety routine?

The status quo often rewards closure. A decision is considered strong when the form is signed, the meeting ends, and the work returns to schedule. Rocha's view places the quality of the evidence before the appearance of closure.

This comparison does not imply that every uncertain condition requires a shutdown. It means the decision should match the consequence, the evidence quality, and the time available to learn more. A low-consequence assumption may be monitored. A high-consequence assumption should trigger a stronger control before exposure continues.

Recommendation

Choose one safety-critical decision from the last 30 days and reconstruct it in 4 stages. First, write the original warning in the words of the person closest to the work. Second, separate facts, inferences, assumptions, and unknowns. Third, identify the person who could pause the work and the temporary control that was available. Fourth, define the fact that would have reopened the decision.

Then repeat the exercise with a supervisor, an EHS professional, and the decision owner. If the three versions differ, do not treat the difference as a communication detail. It is evidence that uncertainty is being filtered before leadership can act.

Rodney Rocha's episode is worth hearing because it turns a historic engineering failure into a present-day leadership question. When information is incomplete, the organization must not demand courage from the person raising the concern while rewarding the person who makes the uncertainty disappear.

Listen to the full Episode 7 conversation with Rodney Rocha, then explore the Headline Podcast safety leadership library and Andreza Araujo's books and practical safety resources.