A management-lesson fortnight, logged for the promotion-adjacent future (January looms). The luggage startup Away, DTC darling, $1.4B valuation, got a devastating culture exposé: leaked Slacks showing “customer obsession” values weaponized into surveillance and public shaming, PTO-guilt rituals, and an executive channel used for performative discipline. The CEO stepped down within days (the chaos, one suspects, is not over). The keeper insight isn’t “startup mean,” it’s that values are runtime configuration: whatever behavior gets rewarded in the incident channel at 11pm is the culture; the poster in the lobby is documentation drift (the Goodhart file: “customer obsession” became a metric, then a weapon; every value becomes a weapon when attached to punishment). Transparency tooling cuts both ways too: Slack made the culture legible to employees and to journalists. Assume your workspace is discovery-ready (the old email lesson, now chat-shaped). ...

Grading season for the launch file. Disney+ arrived to 10 million day-one signups and, yes, hours of capacity errors, the amusing detail being that Disney owns BAMTech, the industry’s gold-standard streaming infrastructure, and the failures were reportedly in the surrounding scaffolding (login, profiles, the Mandalorian-shaped thundering herd, drink). Content verdict: Baby Yoda conquered Earth in 96 hours; the meme-industrial complex has a new sovereign. Stadia also launched (the graded prediction matures): reviews confirm the tech mostly works in good conditions and the ecosystem is the problem, thin library, missing promised features, full-price games on a service with Google’s actuarial tables (the exact objection, now in every review’s lede). “The idea is inevitable; this instance is questionable” holds; the graveyard’s gravity is strong. ...

The Nationals won the World Series, Game 7, in Houston, completing the first championship series in the history of major American sports where the road team won every single game. Seven games, zero home wins, the most-cited prior in sports not merely violated but inverted at full sample size. The team narrative underneath deserves its file: Washington started 19-31 (a .380 winning percentage, statistical last rites administered by every model), was widely urged to fire the manager and sell at the deadline, held course, and went 74-38 the rest of the way through a postseason featuring five elimination-game comebacks. “Stay in the fight” was their season slogan; the boring engineering translation is that mid-season rewrites under panic destroy more teams than mid-season deficits do (retention-is-architecture; endings-need-your-best-people, and the Nats assigned Scherzer and Strasburg to the ending). Baby shark forever. My October-baseball conversion pays compound interest annually. ...

The quantum result published officially in Nature Wednesday: Google claims Sycamore’s 200-second sampling run equals ~10,000 years of classical compute; IBM’s rebuttal, published the same week, argues a smarter classical approach (using Summit’s massive disk as extended memory) could do it in ~2.5 days, supremacy demoted, per Big Blue, to “significant speedup.” The dispute is the healthiest thing about the milestone: an extraordinary claim receiving immediate, credentialed, adversarial peer review in public, both papers legible to any patient engineer. My file’s verdict stands with an amendment: Wright Flyer moment, yes, and IBM is correctly pointing out that Kitty Hawk had a stiff headwind. Both true. The 2.5-days-vs-200-seconds gap is still ~1000x, the classical goalposts will keep moving (they should), and the real curve to watch is error-corrected logical qubits, which remain at approximately zero industry-wide. Check back in five years. ...

The same seven days produced twin case studies in the price of the Chinese market, and the file demands both. First: the Houston Rockets’ GM tweeted support for Hong Kong’s protesters; within 72 hours, Chinese state TV pulled NBA preseason games from schedules, sponsors suspended deals, the league — whose progressive-values branding is a key global strategy — issued a first statement that apologized in two directions at once, and the players got pushed in front of cameras to absorb what the owners wouldn’t. Second: Blizzard banned Hearthstone champion Blitzchung for a year and clawed back his prize money for saying “Liberate Hong Kong” on a post-match stream, then, facing a #BoycottBlizzard revolt spanning its own employees (walkouts under the “Every Voice Matters” campus statue) and US senators from both parties, reduced the sentence in a statement insisting China had nothing to do with it, which persuaded no one anywhere. ...

Adam Neumann is out as WeWork CEO, Tuesday, under investor pressure, the IPO shelved indefinitely, the prediction chain closing its arc in under six weeks from S-1 to defenestration. The final-week reporting delivered details beyond parody (the tequila-and-Run-DMC layoff meeting from 2016; “cereal entrepreneurship”-grade mission language; a private jet story involving a cereal box that I decline to summarize in a family archive), but the structural postmortem is the keeper: every guardrail, board, bankers, auditors, late-stage investors, had economic incentives pointing the same direction as the founder’s narrative, so the system had no adversarial reviewer until the public S-1 process installed one. Code review works because the reviewer doesn’t share the author’s sunk costs (corporate-governance edition). Institutions that pay all their reviewers in the author’s equity should expect author-quality review. ...

The WeWork situation has progressed from close-read to controlled demolition in fourteen days: reported valuation targets have fallen from $47B through $20B toward $10-and-single-digits, the IPO is being “postponed,” bankers are renegotiating in public via leaks, and governance concessions (voting-share ratios, the $5.9M “We” trademark refund, spousal succession clauses deleted) are being announced with the cadence of hotfixes on a failing deploy. The repricing isn’t the story; the speed is. Private markets marked this asset up over nine years; the public market’s due diligence took nine days of S-1 exposure. That asymmetry, narrative compounding slowly under low scrutiny, then repricing instantly under high scrutiny, is the same curve as every incident this blog has filed (belief-with-uptime, the crypto unwind): confidence is a slowly-charging capacitor with a dead-short discharge mode. SoftBank’s Vision Fund thesis is now visibly the counterparty on both sides of its own markups, a sentence that will appear in business-school finals. ...

The WeWork S-1 dropped, and the earlier filed prediction (“it does not go smoothly”) is being graded generously by events. The document is a genre unto itself and Finance Twitter has performed a full distributed close-read. The greatest hits: “Community Adjusted EBITDA” (profitability after excluding, roughly, the costs of running the business); a mission statement about elevating “the world’s consciousness” attached to a company that subleases desks; the founder having personally trademarked “We” and charged the company $5.9M for it; loans to said founder; a governance structure where his shares outvote everyone combined and succession planning names his wife among the deciders. The business math underneath: long-term lease liabilities against short-term revenue commitments, a duration mismatch wearing a kombucha tap (banks call this “borrowing short, lending long”; banks also have regulators and deposit insurance for it). The valuation conversation has reportedly already slid from $47B toward numbers with fewer digits, and the IPO hasn’t even priced. The tell this archive exists to log: every era’s mania produces one document that makes the whole machine legible in hindsight, the ICO whitepapers, the Juicero teardown, and this S-1 is the cheap-money decade’s collected works. ...

Capital One disclosed a breach of ~106 million credit applications, and this one is our industry’s breach, cloud-native in every detail, so the file gets specifics: the attacker (a former cloud-industry engineer) exploited a misconfigured WAF via server-side request forgery, tricking the firewall box into calling the cloud metadata service, which cheerfully handed over the IAM role credentials attached to the instance, which were scoped broadly enough to list and copy S3 buckets at leisure. Every layer is a lesson: SSRF is the cloud era’s skeleton key because the metadata endpoint (169.254.169.254, memorize it like a fire exit) turns “make this server fetch a URL” into “become this server”; over-scoped roles turn one compromised box into an account-wide event (least privilege is boring until it’s the only thing that would have mattered); and detection came not from monitoring but from a tip, since the attacker had discussed the data online. We spent the week auditing our own role scopes and enabling IMDSv2-style protections; found two roles with wildcard S3 access “temporarily” (nothing so permanent, security edition). ...

Apollo 11’s 50th anniversary owned the fortnight’s heart: the restored mission audio, the CBS rebroadcast in real time, the reminder that they landed with a 1202 program alarm blaring because Margaret Hamilton’s priority-scheduled software shed load exactly as designed and kept the important tasks running while the rendezvous radar spammed interrupts. The most consequential graceful degradation in history, executed 250,000 miles from the nearest rollback, by code whose “asynchronous executive” ideas we’re still rediscovering and renaming (load shedding, priority queues, the old gas-auction lesson). I reread her source-code margin notes annually; “TEMPORARY, I HOPE HOPE HOPE” is the most honest comment ever committed. ...