Skip to content

Instantly share code, notes, and snippets.

@ojas

ojas/Design Trust Like a Toyota Truck.md

Last active April 8, 2026 21:17
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save ojas/ec84697ed6b4f63ffdf01fcbd2b2903d to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save ojas/ec84697ed6b4f63ffdf01fcbd2b2903d to your computer and use it in GitHub Desktop.
Download ZIP
DRAFTS
Raw
Design Trust Like a Toyota Truck.md

Design Trust Like a Toyota Truck

2023-SEPT, Austin

Parked the truck, opened the passenger side door, pulled the handle for the access door. It felt wrong.

Duly noted in VCR/Vehicle Condition Report. Failure contained. Workaround exists. No immediate action.

Year: 2005
Make: Toyota
Model: Tacoma
Trim: Prerunner
Miles: 199,554
Customer reports passenger side rear door latch inoperable. Visual inspection revealed plastic retention clip for access cab door latch actuator rod failed

A few days pass. At work site. Pulled the handle. Door would not unlatch. Got 3 other working doors.

Upon return to garage. Maintence day. Consulted G:/Fleet_Mgmt/Shop Manuals/Auto - Toyota Factory Service Manual/. Ah – a hidden screw T25 bit. Grab one from overstock, now designated for onboard toolkit.

No need to even remove panel fully. Simple actuator rod linkage clearly visible. Put the service manual away. Metal's fine, part of retention clip snapped. The guys made it high-visibility orange. Even my 48 year old eyeballs can spot it. That's love.

Grab wire from the "you never know" kit from the workshop and the nice pliers from the garage. Reassuring to know the Mossy Oak Multitool would have gotten the job done if in the field. Remember to add some wire to the onboard repair/toolkit.

CD457F50-A485-4A7C-BDB0-5E0B19462375_1_105_c

7B2327B4-836D-45E2-B6BD-962153D755C5_1_105_c

Good for the next 300KM. To the moon.

I didn’t fix the truck. The truck let me fix it.

What makes old trucks easy to work on

  • Transparency – I opened the door panel and saw the failure immediately.

  • Reversible – I can improvise a fix with bailing wire. No permanent consequences.

  • Forgiving – The mechanism tolerates an imperfect repair. High-precision not required. The mechanism is human scale.

  • Contextual – Failure located exactly where the mechanism lives. That's where the fix goes – not in some hidden / remote black box.

  • Small penalties – The system degraded gracefully. Felt binding first. There are three other working doors.

  • Strong recovery – Repair restored 100% function. Guaranteed to last decades.

This isn't about trucks.

This is what anti-fragile systems look like

  • Transparency — Trust must be inspectable. Ledger visible. Reasons visible. No hidden score.

  • Reversible — Trust damage must be repairable. Compensating entries. Appeals. Recovery.

  • Forgiving — Trust systems must tolerate imperfect judgment. Human overrides. Small errors allowed.

  • Contextual — Trust is local. Per-club. Per-community. No global score.

  • Small penalties — Systems should degrade gracefully. Warn before suspend. Suspend before ban.

  • Strong recovery — Trust must fully restore. No shadow penalties. No permanent stain.

The anti-fragile system wasn’t the truck

The truck enabled repair. The owner performed repair. The system improved because of stewardship.

Anti-fragility lives in: system + steward

Fragile — system without steward

Robust — system despite steward

Anti-fragile — system because of steward

Design trust like a Toyota truck.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment