second-order-effects

Interventions designed to fix visible failures often shift risk elsewhere. By optimizing for the last breakdown, systems become vulnerable to the next one.