HG Atelier / The Operator Switch
Crew / Operational Human Performance · VII-03

Workload & Task Shedding

When more legitimate work exists than available capacity, competence is not “do everything faster.” It is protecting the tasks whose loss would damage the system, deliberately moving or dropping lower-value work, and then rebuilding the workload when capacity returns.

DO NOT LET OVERLOAD CHOOSE FOR YOU. Make the capacity limit visible, protect what must survive, and shed work deliberately enough that you can explain what was lost and why.
Walkthrough

You are learning to make overload explicit.

You will receive a concrete workload with durations, deadlines, dependencies and delegation limits. First you will see the scheduling math and a worked example. Then conditions change until all desirable work no longer fits. Your job is to preserve the system—not the appearance of being busy.

Not being tested
Heroic speed, stress tolerance, perfect memory, or a fake “workload score.”
01 / See capacityList the real work and clocks.Durations, deadlines, dependencies and who is authorized to do what stay visible.
02 / Compute slackFind what can still move.Latest safe start and remaining slack reveal which tasks are becoming fragile.
03 / ReallocateDelegate, defer or drop deliberately.Do not let the least visible task disappear by accident.
04 / RecoverRebuild after stabilization.Task shedding is temporary control, not a permanent excuse to abandon work.
Capability lawThe objective is not to feel calm or finish every task. The objective is to retain useful performance under load: preserve safety/system-critical work, communications and recovery paths; make losses explicit; and reintroduce work when capacity returns.
Situation → source conditions

Start from the work that actually exists.

A university observatory is preparing its next target when a weather review comes due. One trained operator has the enclosure controls. A trainee can perform approved software tasks after a one-minute handoff. The learner does not need to memorize any of this; the Operating Brief will remain available throughout the exercise.

Clock starts
21:03. One operator can perform only one attention-locked task at a time.
Operating Brief — 21:03
All durations and deadlines are synthetic training values. They are intentionally simple enough to reason about directly.
TaskDurationDeadline / triggerWho can do itConsequence if late
Weather decision1 minBy 21:04OperatorEnclosure-protection decision delayed.
Close enclosure3 minOnly if threshold crossed; complete by 21:08OperatorEquipment remains exposed after the closure threshold.
Data checkpoint2 minComplete by 21:07Operator or trainee after 1-min handoffCurrent observation metadata becomes unrecoverable.
Next-target slew4 minStart in time for 21:10 acquisitionOperatorNext observation opportunity is lost.
Quick-look plot3 minNo hard deadlineOperator or traineeScientific convenience delayed.
Shift log4 minBefore 21:30 handoffOperator; trainee may draftHandoff record incomplete if never recovered.
BoundaryWeather and enclosure controls cannot be delegated to the trainee. The target observation is valuable, but losing it does not outrank equipment protection. The data checkpoint matters, but it may still have to be sacrificed if capacity disappears.
Teach → derive

Make the schedule visible before making a priority judgment.

“Important” is too vague. Workload decisions improve when the learner can see time-to-deadline, required uninterrupted work, dependencies and whether someone else can legitimately carry the task.

Reference access
The equations and worked example remain available later. You are not being tested on memorizing them.
Latest safe startdeadline − required duration − required setup / handoff

The latest time a task can begin without already depending on luck.

Slacklatest safe start − current time

Positive slack means the task can still move. Zero slack means it must start now. Negative slack means the original plan is already impossible.

Protected workhigh consequence + short time-to-effect + no substitute

Protection is qualitative; do not invent a universal score.

Movable workdelegate / defer / drop when consequence is bounded

Every shed task keeps an explicit owner or an explicit accepted loss.

Worked example at 21:04.
Suppose closure has become required. Closing takes 3 minutes and must finish by 21:08.

latest safe start = 21:08 − 3 min = 21:05
slack at 21:04 = 21:05 − 21:04 = 1 min

The data checkpoint takes 2 minutes and must finish by 21:07. If the operator personally performs it first, 21:04 + 2 min = 21:06, which is already after the enclosure's latest safe start. The two tasks cannot both be done sequentially by the operator without missing a deadline. If the trainee is available, a one-minute handoff from 21:04–21:05 lets the trainee checkpoint 21:05–21:07 while the operator closes 21:05–21:08.
Reasoning traceSource conditions → deadlines/durations → latest safe starts → dependency/authority check → protect / delegate / defer / drop → reassess after new evidence.
Predict / plan

Before the weather result, decide what you are protecting.

At 21:03 the closure is not yet required. The weather decision is due in one minute. Build the first plan without assuming the alert will worsen.

Correct continuation matters
Prematurely abandoning the next target is not automatically competent.

1. What must happen first?

The answer should follow from the earliest non-delegable decision clock.

2. Which work is the best delegation candidate if conditions worsen?

Use authority and deadline—not status or prestige.

3. Which task can safely wait without consuming a hard deadline?

Update → recalculate

New evidence changes the workload.

At 21:04 the weather review crosses the enclosure-closure threshold. Closing now becomes required by 21:08. The trainee is available. Recalculate before acting.

Current time
21:04.
TaskLatest startSlack nowAuthorityInterpretation
Close enclosure21:051 minOperator onlyRequired now; a one-minute handoff still fits, but no more.
Data checkpoint21:05 if trainee handoff starts now1 minOperator or traineeCan survive only if moved to the trainee now.
Next-target slew21:062 minOperator onlyStill mathematically possible in isolation, but conflicts with closure.
Quick-lookNo hard latest startFlexibleEitherDefer without losing a protected state.
Parallel plan.
21:04–21:05: operator hands the data checkpoint to trainee.
21:05–21:07: trainee checkpoints data while operator closes enclosure.
21:05–21:08: operator completes enclosure closure.

This preserves both protected tasks, but there is no operator capacity left for the next-target slew. The observation opportunity must be deliberately shed.

What is the coherent plan now?

Capacity loss → deliberate shedding

Now the plan breaks.

At 21:05, just as the handoff finishes, the trainee's terminal loses access. The trainee cannot perform the checkpoint. The operator is now the only person who can act, and enclosure closure still requires the full 21:05–21:08 interval.

Current time
21:05. Data checkpoint deadline 21:07. Enclosure deadline 21:08.

The capacity equation is now impossible.

Operator time available before the data deadline: 2 minutes. Data checkpoint needs 2 minutes. But using those 2 minutes would delay enclosure closure until 21:10, two minutes past its required completion. Doing enclosure first consumes 3 minutes and makes the data checkpoint deadline impossible.

There is no clever schedule that preserves both tasks.
This is the moment task shedding becomes a real capability. The learner must choose the loss explicitly instead of pretending every objective remains available.

Which loss do you accept?

What happens to the next-target observation?

Recover → rebuild workload

Task shedding ends when the overload ends.

At 21:08 the enclosure is closed and stable. The current observation metadata was lost. The next-target opportunity is gone. Capacity has returned, so the learner must rebuild the queue rather than remain in permanent emergency mode.

Recovery
Stabilized ≠ finished. Restore legitimate deferred work and document accepted losses.

What should happen next?

What does the accepted loss mean?

Cross-context / Black Knight training simulation

Same capacity law. Different work.

A Black Knight observation-instrument service window is open. The surface details change, but the learner still has to use durations, deadlines, authority and consequence. This is a training simulation, not a canon event.

Cross-context test
Recognize overload structure without copying the observatory answer.
Service brief — 22:21
TaskDurationDeadlineAuthorityConsequence
Restore instrument-bay seal3 minComplete by 22:28Operator onlyService window cannot close correctly.
Capture diagnostic bundle2 minComplete by 22:26 before node rebootOperator or service partnerCurrent diagnostic state lost.
Optional calibration sweep4 minUseful only before seal restorationOperatorCalibration opportunity lost.
Configuration log3 minBy 22:40Either; operator reviewsLater handoff weakened if omitted.
Reference arithmetic after the partner is diverted.
diagnostic latest safe start = 22:26 − 2 min = 22:24
seal latest safe start = 22:28 − 3 min = 22:25
configuration-log latest safe start = 22:40 − 3 min = 22:37

The optional calibration sweep takes 4 minutes and must occur before seal restoration, but it has no protected deadline. One operator means these actions must be scheduled sequentially. Use the same protect / defer / drop logic to decide what still fits.

Choose the cross-context plan.

Record / maintain

Make the workload decision reconstructable.

A useful record preserves what was protected, deferred, delegated, or deliberately lost; what evidence changed the plan; and which obligations return after stabilization. It reveals the trade rather than rewarding busyness.

Session scope
Prioritization and task-shedding reasoning in this simulation.
Workload-management record
Next real-world step

Use ordinary overloaded work.

On a bounded workday, project or rehearsal, write down durations, deadlines, dependencies and who can legitimately carry each task. When overload appears, make the shed/defer/delegate decision explicit and review what actually happened.

Maintenance

If “everything is priority one,” if dropped work disappears silently, or if stabilization never leads to recovery of deferred tasks, the capability is degrading.

← Operator Switch