Own Your Mistakes First

On this page

When you break something, the only race that matters is between your report and someone else's discovery — and the winner gets to narrate.

Every incident produces two artifacts: the technical damage and the story about the technical damage. The damage gets fixed in hours or days. The story persists for years, attached to your name. Most engineers obsess over the first artifact and let the second one get written by whoever happens to notice the breakage. That is a strategic error. Self-reporting first — "I broke X, here's the blast radius, here's the fix in progress" — makes you the reliable narrator of your own incident. You frame severity, cause, and remedy while everyone else is still forming their first impression. Get discovered instead, and you become a character in someone else's narrative, one where every fact you didn't volunteer looks like a fact you were hiding.

Why the mechanics work

Orgs forgive errors but not surprises. This is the load-bearing asymmetry, and it's worth understanding why it exists. An error is expected statistics: any org that ships software knows some percentage of changes will break things, budgets for it, and builds rollback tooling because of it. Your mistake was already priced in before you made it. Concealment, though, is not statistics — it's a character datum. It tells the org something about you, not about the change: that under pressure, you optimize for self-protection over shared awareness. Errors decay from memory. Character data doesn't. One discovered cover-up recalibrates how everything you say is read, permanently, because the org can no longer distinguish your silence-because-nothing-happened from your silence-because-something-did.

The first account anchors everything. Humans don't evaluate incidents from scratch; they evaluate them relative to the first framing they hear. If your message arrives first — "config change broke checkout for EU sellers, roughly 4% of traffic, rollback in progress, clean by :30" — then every subsequent conversation happens inside that frame. Someone who later says "checkout was down" is corrected by your numbers. If discovery arrives first, the anchor is whatever the discoverer inferred, usually worst-case ("checkout is broken and nobody knows why"), and you spend the incident arguing people down from a frame you never chose. Anchoring isn't a persuasion trick here; it's just the physics of who supplies the priors.

A bundled report changes what the event is about. "I broke prod" is a confession. "I broke prod, here's exactly what's affected, here's what I've ruled out, fix ETA :45" is a demonstration of operational competence that happens to contain a confession. The bundle converts the incident from evidence about your carelessness into evidence about your judgment under pressure — which is the scarcer and more career-relevant trait. This is why a well-handled break is frequently net-positive for reputation: the org learned less from the mistake (expected) than from the handling (rare).

Senior engineers self-report conspicuously fast — and that's causal, not incidental. Watch who has production access, deploy overrides, and standing permission to touch scary systems. It's the people whose incident reports arrive within minutes, unprompted, with blast radius attached. The org isn't trusting them because they never break things; everyone with real access breaks things. It trusts them because their failures are self-announcing, which means their access carries no monitoring cost. Fast self-reporting is not a side effect of seniority. It's part of the entry fee.

Cases

The discovered engineer. An engineer pushes a migration that silently corrupts a low-traffic table. He notices two days later, quietly patches it, says nothing. A month on, an analyst finds anomalies in a downstream report and traces it back. Now the story is not "migration bug" — those are boring. The story is "he knew and didn't say." He is technically excellent; it doesn't matter. Approvals on his changes get slower. Nobody says why.

The reliable narrator. An engineer fat-fingers a feature flag and takes down search suggestions. Within six minutes she's posted: what she did, which surfaces are affected, what's not affected, that revert is deploying, and a follow-up promise for the full timeline. The incident review is calm because everyone is working from her facts. A quarter later she's the one asked to run the risky platform migration — precisely because everyone saw how she behaves when things go wrong.

Practices

  • Report before you're sure. Waiting for full information means losing the race. Structure the early report as three lists: what I know, what I don't know yet, when I'll know it. This is fully honest and still first.
  • Never let your manager hear it from someone else. The no-surprises rule. Your manager can defend you effectively only if they were briefed before their boss or a peer team pings them. A manager blindsided in a meeting pays a credibility cost — and remembers who charged it to them.
  • Write the timeline immediately. In the first hour, the facts are yours: what you ran, when, what you saw. Memory reconstructs; logs get rotated; other people's recollections drift toward blame. A contemporaneous timeline is the cheapest insurance you will ever buy.
  • Resist minimizing. "Small issue, probably nothing" that grows into a Sev-2 is a double hit: you get the incident and a fresh datum that your severity estimates run low. If uncertain, state the plausible worst case explicitly and label it as the bound, not the estimate.

Failure modes

  • Over-apologizing. Self-flagellation ("I'm so sorry, I can't believe I did this, I feel terrible") inverts the transaction: now colleagues are managing your emotions instead of the incident. It reads as instability, not accountability. State the facts, own the cause, fix the thing. One sentence of ownership; zero sentences of anguish.
  • Confessing trivia. Escalating every reverted commit and self-caught typo trains people to tune out your reports — and signals you can't tell signal from noise, which is itself a judgment red flag. The threshold: did it affect anyone outside your own working tree, or could it have? Below that line, just fix it.

Diagnostic test

When you realize you've broken something, check your first instinct: if it's "who might find out?" rather than "who needs to know?", you're already losing the race.

Share this article

Code from Dude

Engineering, systems, and the decisions behind durable work.

© 2026, Gokul Prabhu