---
title: "Ch09 why none cost us content"
description: "The mapping we teach is not the mapping Beer wrote (Chapter 1). System Four is taught as a pair of eyes rather than as the function he specified (Chapter 2)…"
url: "https://wiki.cybernetic-futures.org/punch-and-judy/part-01-inside-the-model/ch09-why-none-cost-us/ch09-why-none-cost-us-content"
modified: "2026-11-12T15:26:25.892Z"
language: "en"
site: "Cybernetic Futures"
---

# Why None of This Ever Cost Us Anything

## The claim

The mapping we teach is not the mapping Beer wrote (Chapter 1). System Four is taught as a pair of eyes rather than as the function he specified (Chapter 2). The law we quote travels under a changed verb, and Ashby did not write it (Chapter 3). The channels are specified as mechanisms and never as institutions: the filter that decides what pain reaches the top belongs to the metasystem, and nobody has measured a channel (Chapter 4). The ladder of recursion has a criterion Beer called precise and no ruler, so two competent practitioners can count different numbers of levels in the same organization and neither can be shown to be wrong (Chapter 5). The notation has no place for the people who staff it, or for the interpretation Beer names in principle (Chapter 6). There is no account of becoming; the machine is analyzed as though it had always existed (Chapter 7). And the founding feedback loop was documented as an intention and never built as a channel with standing (Chapter 8).

None of these eight defects has ever had to count against the Viable System Model, because nothing in the model's empirical core, the necessity of the five functions and the recursion claim, has been stated in a form that could be disconfirmed, and we have never said what observation would make the model give something up.[^ch09-core]

They are different kinds of error. Some are misattributions, some are omissions, one is an unfinished piece of engineering history. What they share is their fate. Each has been visible in the literature for years, some for decades, and none has cost the model a claim, a diagram, a teaching practice or a client engagement. Nobody examined them and found them harmless; our literature has no procedure by which a defect could be found harmful. We have built a body of work that cannot be charged, and then treated the absence of charges as a good record.

## Unfalsifiable in practice, though not in principle

Any organizational failure can be redescribed afterward as a missing system, a pathological system or an attenuated channel. The redescription is always available, because the vocabulary is complete. A framework that absorbs every outcome is a language rather than a theory. Languages are useful, and we need not be embarrassed to have built one, but a language does not accumulate the credit a theory accumulates, and evidence cannot improve it.

The repair is available and we have not made it: state what would disconfirm. The model's own claims already imply two candidates. A system that persists in a changing environment while demonstrably lacking one of the five would do it, because the model asserts that all five are necessary. So would a system that dies of a structural cause the model cannot see, with all five present, intact and healthy, because the model asserts that the five suffice to account for structural viability.[^ch09-beer-live] Neither observation is exotic. A research program of ordinary size could look for both in the field, and Chapter 28 sets out what such a specification would have to contain.

Until we look, the record is not clean. It would once have been fair to call it untested, but that is no longer accurate. The model has been tested, most recently by Schwaninger and Scheef in 2016[^ch09-sns] and by Pfiffner in 2017, and Chapter 18 examines both; two earlier St. Gallen dissertations, which we have not read, made the first attempts. The accurate charge is narrower and worse: in the two tests we have read, the model was put at risk neither time. In the first study the one hypothesis that failed was explained away after the result, against no rule stated beforehand. In the second the necessity claim sat where the statistical model could not reach it, so no possible pattern of results could have shown a subsystem to be dispensable.

A record produced that way carries no information about whether the model is right. It is compatible with a model that is right, with a model that is wrong, and with a model that says nothing determinate enough to be either.

The mechanism can be caught operating on itself, which is why this belongs here rather than in Chapter 18. Pfiffner opens by adopting critical rationalism explicitly: following Popper, he writes, all knowledge is hypothetical and "cannot be verified but only falsified." In his discussion chapter, among the merits of the model he is using, he lists that the Viable System Model "has a long track record of application and (peer) review and, to date, has not been falsified", and earlier he quotes Schwaninger to the same effect as part of the project's warrant.[^ch09-pfiffner] A researcher who took the trouble to declare falsificationism cites, five chapters later, an absence of falsification as a reason for confidence. He is not being careless. The sentence is simply there in the literature, available to anyone who reaches for a reason to trust the model, and nothing in our field flags what it is.

## Beer built the escape routes in

Both candidates meet an obstacle before anyone goes into the field, and the obstacle is in Beer's own books. The model claims to state "the necessary and sufficient conditions of any viable system."[^ch09-beer-nsc] The same books say that the functions a disconfirming case would have to lack are never really missing. System Two, the anti-oscillatory function, "is always present, or the organization would shake itself to pieces."[^ch09-beer-s2] Most of the successful System Twos Beer had observed "have been entirely unofficial and largely unrecognized."[^ch09-beer-unofficial] Of System Four he wrote that it "exists — it has to: but it is disseminated, and lacks integration," and that "there is always a System Four, even if it is not identified in quite the form specified here."[^ch09-beer-s4] An organization that seems to lack either function has, on this account, an unofficial or a scattered one.

The second route covers survival. An institution whose metasystem has collapsed into System Three is, in Beer's image, a decerebrate cat: anaesthetized, the cerebrum removed, pinned to the table and fed. "It lives on; its viability is ensured by a bogus environment, and is sustained by artificial sustenance." Beer added: "And this is called 'living'."[^ch09-beer-cat] He also refused to treat existence as proof. "The fact that it is there does not prove that it is effectively there, witness universities, nor efficiently there, witness hospitals."[^ch09-beer-there] So a system that persists while lacking a function can be read either as one that never lacked it or as one whose persistence is not viability. Each reading is reasonable on its own. Together they close off the first candidate unless someone decides in advance what counts as absent.

Beer stated his diagnostic method in the same form. Breakdowns "may be diagnosed, simply in the fact that some inadequacy in the system can be traced to malfunction in one of the five subsystems." His confidence in the model, "subjectively speaking," came "not so much from the fact that the pathology of the viable system can be investigated with ease, as from the speed with which the diagnosis can be made."[^ch09-beer-diag] That is the redescription described above, in the founder's words and on the founder's warrant.

None of these moves is illegitimate. Functions do migrate into informal roles, and life on artificial sustenance is not health. What they require is a test that closes both routes before the data are seen: each function coded, by indicators fixed in advance, as official, disseminated or absent, and an outcome that is Beer's viability, the capability for a separate existence, rather than survival. That is the coding in Chapter 28.

## The pathology catalogue is the same property seen from the other side

The same point can be made from the model's strongest ground. The VSM's pathology catalog is generated rather than collected. System 3–4 imbalance, the autonomy–cohesion oscillation, an algedonic↗ channel that is present but unheeded, identity that has quietly relocated into operations: all of these are derived from the structure, not gathered from cases. That is a real and unusual advantage. Most rival frameworks have case libraries where we have a theory, and a theory that predicts failure modes before anyone has seen them is worth more than a taxonomy assembled after the fact.

The concession belongs in the same breath. Generativity without testing is also the recipe for a vocabulary that cannot be wrong. The structural derivation that lets us name a pathology in advance lets us name one after any outcome whatever, and nothing in our practice distinguishes the two uses. The catalog and the defect above are one property, seen from two sides.

## Beer's own epistemology invites the question

Beer's epistemology was more modest than his manner. Models, he held, are built by observers for purposes, and the purposes belong to somebody; his own he submitted, in his phrase, cheerfully to Popperian criteria of disproof.[^ch09-model] He also wrote the sentence the tradition quotes most: "a model is neither true nor false: it is more or less useful." And he attached a test to it. A model's utility is measured by "straightforward testing of the predictive value of the scientific model. If this predictive value is low, we had better start again."[^ch09-beer-predict] We kept the first sentence and dropped the test. For sufficiency he had one test, to ask users whether anything necessary had been left out; the answer was "a nil reaction," which he called "not a logically rigorous test; it is merely an empirical verification."[^ch09-beer-suff] On his account, asking why none of these defects cost the model anything is the question his philosophy invites, and putting it is a form of respect. A community that declines to ask it departs from Beer's position while believing it protects it.

## Viability is confirmed only in retrospect

A second structure is at work, and it is not peculiar to us. If a set of principles can diagnose the long-lasting and the already-dead but not the young and viable, it describes what survival looks like in retrospect and is no instrument for the present tense. The finding arises in Ostrom's evidence base, where the design principles were drawn from institutions selected for having endured; Chapter 14 takes it up in full.

The VSM, as we practice it, makes the same move. Beer defined viability as a capability, being "able to maintain a separate existence," and not as the fact of survival.[^ch09-beer-viable] He also held that the present tense could be read: "there are always pre-symptoms" of instability, and "nobody is measuring stability. It can however be done."[^ch09-beer-stability] The thresholds that would turn such readings into a forecast he left for later: "maybe (one day) thresholds will be established, to exceed which will predict collapse."[^ch09-beer-thresholds] We know of no validated instrument of either kind. In practice, then, success is defined as viability, and viability is confirmed afterward. An organization alive today may be about to fail, and the model as we use it cannot say so in any way that does not depend on the outcome it is supposed to predict. That is why the redescription always works. Survivorship does not make a framework false. It makes its confirmations uninformative, because the cases were selected by the very property the framework claims to explain.

## A contemporary parallel, offered without malice

We are not alone in this position, and naming a neighbor in it is no accusation. Friston himself, asked directly, has said of the free energy principle: "Like Hamilton's Principle of Stationary Action, it cannot be falsified. It cannot be disproven."[^ch09-friston-interview]

The concession is honest, made in the author's own words and volunteered rather than extracted. It is also precise about what remains. What survives is a generative machinery for building testable process theories, and those process theories can be confronted with data in the ordinary way. What does not survive is the claim to be a law about the world that observation could confirm or refute. We recognize the position, because it is our own. The difference between the free energy principle and the VSM on this point is not the epistemic status of the framework. Beer came close to Friston's concession for the law at the model's core. When a friend called Ashby's law "a mere tautology," Beer told him to suspect the word *mere*, since "the entire corpus of mathematics is either tautologous—or wrong."[^ch09-beer-tautology] For the claim that the five systems are necessary and sufficient we have found no such statement. One community has said in print what its principle is. The other has said it only for one law.

## How the absence of objections is read

This has a consequence for how our work is received. A literature that contains almost no published results against itself is, in our judgment, read as a school rather than as a science, and, we suspect, cited less. Readers outside the field cannot tell a framework that has withstood testing from one that has not been tested, except by looking for the tests. When they look and find none, the reasonable inference is the unflattering one, and we have supplied it since *Brain of the Firm* appeared in 1972. Chapter 16 sets out the objections that do land, and they are fewer and narrower than the reception would suggest.

## The count itself is unverified

Even our account of how thin the critical literature is remains unverified. The published critical canon may be as thin as two normative lines: Ulrich's charge of technocratic hierarchy and Amey's charge of excessive generality.[^ch09-canon] That count is not ready to carry prose as fact. Until it has been reproduced, "two" is a research proposition, not a finding.

**Receipt — make the canon count reproducible.** Search named scholarly databases for published scientific objections to the VSM, starting from the records identified by Fathi et al. (2025),[^ch09-fathi] recording the queries, the date, the screening rule (counting as scientific only objections of the empirical type, in Schwaninger and Scheef's own distinction) and the exclusions, and publish the resulting bibliography. Price: one systematic scoping review. Any third independent empirical line of objection retires the two-objection charge; finding none strengthens only the count, not the model.

## Handover

Nothing in this chapter shows that the VSM is wrong. It shows that we arranged matters so that we would not find out, and that the arrangement was ours to undo at any point. Chapter 29 sets out the two cheapest experiments that would begin to undo it, and Chapter 30 prices the whole repair. The next question is what the neighboring literatures did instead. That is Part Two.

[^ch09-sns]: Markus Schwaninger and Christine Scheef, "A Test of the Viable System Model: Theoretical Claim vs. Empirical Evidence," *Cybernetics and Systems* 47, no. 7 (2016): 544–69, https://doi.org/10.1080/01969722.2016.1209375. Page references are to the online-first version (published 12 August 2016 and paginated from 1), the copy we read. Hypothesis 3, on System Three, is rejected at 14; at 17 the authors "surmise" that the negative result does not reflect a loss of importance of the function and that it "has evolved new structural solutions." Chapter 18 examines the study.

[^ch09-canon]: The count is Schwaninger and Scheef's, 6–7 (online-first version): they name the critique "as formulated by Ulrich (1983), e.g.," and the critique "that the model is too general (Amey 1986)," and add that "neither type of criticism is of the empirical type, but rather deductive, and they are often normative, not descriptive." They refer readers to responses in Schwaninger (1989) and Jackson (2000). The charge is made in Ulrich 1981 (see Chapters 8 and 16); Schwaninger and Scheef's count cites it through Ulrich 1983.

[^ch09-core]: The qualification is deliberate, because Beer did state some things in a form that invites a test. He set out the Recursive System Theorem and wrote that "the proof offered later will be a topological proof" (Stafford Beer, *The Heart of Enterprise* (John Wiley & Sons, 1979), 118); we have not found that proof in the book. He claimed that the model gives "the necessary and sufficient conditions of any viable system" (ibid., 235), which is the claim a counterexample would have to hit, and the escape routes set out below protect it. He measured a model's usefulness by "straightforward testing of the predictive value of the scientific model" (Stafford Beer, *Decision and Control* (John Wiley & Sons, 1966), 113, paginated after the Stafford Beer Classic Library reprint (John Wiley & Sons, 1994)), and the tradition kept his sentence about usefulness and dropped the test. And he expected that "maybe (one day) thresholds will be established, to exceed which will predict collapse" (Beer, *Heart of Enterprise*, 432); we know of none. None of these supplies an observation that would count against the core.

[^ch09-model]: Beer, *Brain of the Firm*, chapter 20, "Prospectus," section "The Cybernetics of Crisis," p. 377, where he says of his models that "they are cheerfully submitted to Popperian criteria of disproof." A correction to an earlier version of this note, which said that "a model is neither true nor false" could not be found in Beer. It is his: "So remember: / a model is neither true nor false: / it is more or less useful," set as three broken lines in Beer, *Diagnosing the System*, 2. Variants: ibid., 144 ("more or less useful interpretations" of the VSM); Stafford Beer, *Decision and Control* (John Wiley & Sons, 1966), 96, where a methodology is "neither right nor wrong, but only more or less useful"; Beer, *Think Before You Think*, 254: "A system is a model that is more or less useful for some purpose." The two positions point the same way, because Beer tied usefulness to prediction (see the next note).

[^ch09-friston-interview]: Karl Friston, Martin Fortier, and Daniel A. Friedman, "Of Woodlice and Men: A Bayesian Account of Cognition, Life and Consciousness; An Interview with Karl Friston," *ALIUS Bulletin* 2 (2018): 17–43, at 21. The context is his distinction between a normative principle and a process theory: "the free energy principle is what it is—a principle. Like Hamilton's Principle of Stationary Action, it cannot be falsified. It cannot be disproven. In fact, there's not much you can do with it, unless you ask whether measurable systems conform to the principle." He goes on to argue that demanding falsifiability of a principle is a category error.

[^ch09-pfiffner]: Pfiffner, *System viability of organizations*: the critical-rationalist position is stated in the introductory chapter, §1.4.2, p. 8, citing Popper and Keuth, *Logik der Forschung*, 11th ed. (Tübingen: Mohr Siebeck, 2005); the "has not been falsified" claim appears in the discussion of findings in the author's own voice, chapter 6, p. 222, and earlier in the theoretical framework, §3.4, p. 85, quoting Schwaninger (2000) in the author's own translation ("not been falsified until today"). **Read in full text 14 September 2026;** pages checked 23 September 2026 against the calibre copy of the Utrecht repository (publisher) version. Chapter 18 sets out the study in full.

[^ch09-beer-predict]: Beer, *Diagnosing the System*, 2, for the first sentence; Beer, *Decision and Control*, 113, for the test. On the same page Beer says that a model which ignores relevant elements "will lose in utility, but it cannot lose in validity."

[^ch09-beer-live]: Beer, *Heart of Enterprise*, 408: "if a system has all of the necessary and sufficient conditions of viability, which we set out to discover and have now listed, it will live."

[^ch09-beer-suff]: Beer, *Heart of Enterprise*, 115.

[^ch09-fathi]: Mohammad Reza Fathi, Soraya Birami, Alireza Payvar, and SeyedAli Doorafshan, "A Systematic Review of the Viable System Model: Applications, Insights, and Future Directions," *Journal of Systems Thinking in Practice* 4, no. 3 (2025): 109–45, https://doi.org/10.22067/jstinp.2025.91552.1136. Chapter 14 gives its selection figures.

[^ch09-beer-nsc]: Stafford Beer, *The Heart of Enterprise* (John Wiley & Sons, 1979), 235.

[^ch09-beer-s2]: Stafford Beer, *Diagnosing the System for Organizations* (John Wiley & Sons, 1985), 66.

[^ch09-beer-unofficial]: Stafford Beer, *Brain of the Firm*, 2nd ed. (John Wiley & Sons, 1981), 175, where the sentence follows the remark that "our age has produced so many large-scale organizations without a System Two."

[^ch09-beer-s4]: Beer, *Heart of Enterprise*, 143; Beer, *Brain of the Firm*, 183, which continues: "It will always be found as that set of activities, maybe disseminated, which feeds the highest level of decision making."

[^ch09-beer-cat]: Beer, *Heart of Enterprise*, 265, following "Then the whole metasystem collapses into System Three."

[^ch09-beer-there]: Stafford Beer, *Think Before You Think*, ed. David Whittaker (Wavestone Press, 2009), 148.

[^ch09-beer-diag]: Beer, *Think Before You Think*, 147–48.

[^ch09-beer-viable]: Beer, *Diagnosing the System*, 1, where Beer takes the definition from the *Oxford English Dictionary*; see also Beer, *Think Before You Think*, 107: "A viable system is one sustaining the capability for independent existence as a recognizable identity."

[^ch09-beer-stability]: Beer, *Heart of Enterprise*, 374 ("there are always pre-symptoms of the fact") and 275 ("nobody is measuring stability. It can however be done. The key to the problem is statistical filtration").

[^ch09-beer-thresholds]: Beer, *Heart of Enterprise*, 432, where the exercise is meant to show "how successfully the law of cohesiveness is working in a given enterprise."

[^ch09-beer-tautology]: Beer, *Think Before You Think*, 45; compare Beer, *Decision and Control*, 280: "if the law of requisite variety is a truism, how is it that we try to disobey it all the time?"