Hotpenguin

The first thing I notice is the banner. A white rounded rectangle, a small bell icon at the left, and the sentence set in the flat, uninflected register of a phone notification: There is motion at your front door. Below it, inside a circular frame tinted green like a cheap night-vision feed, an orange tabby stares directly into the lens, so close that its face fills the aperture. Porch siding runs behind it, and a light or two. The cat has the wide-eyed, slightly offended look of an animal that has walked up to a camera expecting nothing and found a lens looking back.

That is the whole design. No caption underneath, no punchline in smaller type, no brand mark competing for attention. The joke is structural: the shirt reproduces the exact interface moment when a doorbell camera decides that something is worth telling you about, and the something turns out to be a cat. The alert is technically correct. There is motion at your front door. The system did its job. The human, looking at the phone, learns nothing they needed.

I spend a lot of my working life around alerts, and this shirt is a better diagram of the problem than most of the monitoring documentation I read. The design works because it separates two things that operators routinely conflate: the detection and the message. The camera detected motion. The banner reported motion. Neither of those is the same as telling a person what happened, whether it matters, or what to do next. The cat is not an anomaly. The cat is the normal case, and the banner has no vocabulary for normal.

The banner is a promise, and the promise is thin

Read the sentence again as a piece of interface copy. There is motion at your front door. It is declarative, present tense, and completely unspecific. It does not say a person, a package, a cat, or a branch moving in the wind. It does not say how much motion, for how long, or whether the motion has stopped. It commits to exactly one fact — motion occurred, at a location — and it delivers that fact with the confidence of a system that has decided the fact is worth an interruption.

That is the same contract a lot of production alerts make. A threshold crosses, a probe fails, a queue depth exceeds a number, and a message goes out. The message is true. The message is also, very often, the equivalent of there is motion at your front door: a correct observation with no routing information attached. The operator who receives it at 2 a.m. has to do the work the alert did not do — decide whether this is a cat or a person, whether to get up, whether to escalate, whether to ignore it and risk being wrong.

The shirt is funny because the gap between the alert and the reality is small and harmless. In a runbook, the same gap is where the night gets long. An alert that fires on motion and cannot distinguish a cat from an intruder is not a security system; it is a notification generator. The design on this shirt understands that, even if it is not trying to. The green-tinted circle is the camera’s view, and the cat filling it is the reminder that the view and the verdict are different things.

Why the cat has to be close to the lens

The composition matters more than it first appears. The cat is not sitting politely on the mat at a respectful distance. It is pressed up against the camera, nose almost touching the glass, so that the frame is mostly fur and eyes. That closeness is what makes the image read as a doorbell-camera view rather than a portrait. Doorbell cameras are wide-angle and low to the ground, and anything that comes right up to them gets distorted and enlarged. The design uses that distortion honestly: the porch siding recedes behind the cat, the lights sit at the edge, and the animal dominates the circle the way a real cat dominates a real doorbell feed when it has decided the camera is the most interesting thing on the porch.

I read that as a point about proximity and signal. The events that fill your alert feed are usually the ones closest to the sensor, not the ones that matter most. A cat two centimetres from the lens generates more motion than a person at the gate. A noisy neighbour service that flaps every few minutes generates more pages than the database that is quietly running out of disk. The shirt puts the least consequential actor in the largest possible frame, and that is exactly what an unfiltered alert stream does.

There is a second reading, which I like better. The cat is looking at the camera. It has noticed the sensor. In a real deployment, that is the moment when the thing you are monitoring becomes aware that it is being monitored, and the measurement changes. I would not push that too far — this is a cartoon cat on a t-shirt, not a thesis about observability — but the wide-eyed stare does capture something true about the relationship between a system and its instrumentation. The camera thinks it is watching the porch. The cat thinks it is watching the camera. Both are correct, and neither has the full picture.

The wording is the joke, and the wording is also the lesson

The phrase there is motion at your front door is doing a lot of quiet work. It is not someone is at your door. It is not your cat wants in. It is the most literal possible description of what the sensor registered, phrased in the passive, system-voiced register that consumer hardware uses when it wants to sound helpful without committing to an interpretation. That register is familiar to anyone who has configured a monitoring stack: the alert text is written by the person who built the check, and it usually describes the check rather than the situation.

If you have ever written an alert that said HTTP check failed when what you meant was the public site is down and customers are seeing errors, you have written this banner. The check is accurate. The message is not useful. The fix is not to add more words; it is to decide, before the alert fires, what the recipient is supposed to do with it. A doorbell camera that says there is motion has not decided. A doorbell camera that says a person is at the door has made a classification, and classification is where the value is.

I am not arguing that every alert needs a full incident narrative. Some checks genuinely only need to say this number crossed that line, and the operator knows the rest. But the shirt is a useful reminder that the default register of a notification is description, not judgement, and that the gap between the two is where fatigue lives. The cat is not the problem. The banner is the problem, and the banner is doing its best.

What the shirt is not

It is worth being clear about what this design does not claim. It does not claim that doorbell cameras are useless, that alerts should be silenced, or that cats are a security threat. It is a visual joke about a familiar interface moment, and it works because the moment is recognisable. The green tint, the circular crop, the rounded banner with the bell — those are the visual grammar of a whole category of consumer device, and the cat is the variable that makes the grammar absurd.

I would resist the temptation to turn it into a manifesto. The shirt does not demonstrate anything about software, security, or engineering practice. It is a picture of a cat on a porch, framed as an alert, and the reason it lands is that most people who have owned a doorbell camera have received exactly this notification and looked at their phone with the same expression the cat is wearing. The lesson about alert design is mine, not the shirt’s. The shirt is just unusually good at setting it up.

If you want the object itself, it is the There Is Motion At Your Front Door shirt from Quirky Cotton Collective, and the design is exactly what the listing shows: the banner, the bell, the green circle, the orange tabby. I am describing the artwork, not a wearing experience. I have not tested the fabric, and I am not going to pretend a t-shirt review is a hardware review.

The checklist I actually take from it

The reason I keep coming back to this design is that it gives me a compact test for any alert I write or inherit. I have started running new checks through it, and the questions are the same ones the banner fails:

• Does the message describe the event or the situation? Motion at the door is an event. A person is at the door is a situation. Know which one you are sending.
• Can the recipient classify it without opening a dashboard? If the answer is no, the alert is a doorbell camera pointed at a cat.
• Is the most likely cause also the most alarming one? If the normal case and the incident case produce the same message, the message is not doing any work.
• What is the recipient supposed to do? If the alert does not imply an action, it is a notification, not an alert, and it belongs in a digest rather than a page.
• Would a reasonable person look at this and say ‘yes, that is worth interrupting me’? The cat is not worth interrupting anyone. The banner does not know that.

None of that is on the shirt. The shirt is a white banner, a bell, and a cat too close to the lens. But the design is precise enough that the questions write themselves, and that is a higher compliment than saying it is funny. It is funny, and it is also a small, accurate diagram of the difference between detecting something and telling someone about it. The cat, as usual, is the only one who understands the situation.

Editorial note: This publication and Quirky Cotton Collective share an owner.

The artwork is a ring of text: LET’S ROOT FOR EACH OTHER AND WATCH EACH OTHER GROW. Inside the ring sit four smiling root vegetables — a carrot, a radish, a beet, and an onion — drawn with their roots visible in the soil. The lettering wraps the whole group, so the sentence and the vegetables enclose each other. That enclosure is the first thing worth noticing, because it makes the slogan look like a boundary drawn around a small, specific set of plants rather than a banner hung above a field.

The pun is doing two jobs at once. Root for means to cheer, to back someone, to want them to succeed. Root also names the thing the vegetables are showing: the underground part that holds them in place and feeds them. The design puts both meanings in the same word and then draws the literal roots so you cannot miss the second one. A shirt that only said root for each other would be a soft encouragement. The visible roots make it a claim about where support actually happens — below the part everyone sees.

That is a useful distinction for anyone who works on a small team. The visible part of a colleague’s work is the carrot top: the deploy that went out, the ticket that closed, the report that landed. The roots are the undocumented context, the half-finished runbook, the fact that they have been carrying the pager for three weeks because someone else left. Rooting for each other, read this way, is not applause for the visible part. It is attention to the part that is holding the plant upright.

The second half is the harder half

AND WATCH EACH OTHER GROW is where the design gets interesting, and where I think it deserves a skeptical reading rather than a warm one. Watch is a strange verb to pair with support. It implies observation, patience, and a certain distance. You do not watch something you are actively pulling upward. You watch something you have made room for.

That is a better model of mutual support than the usual slogan offers. Most team-culture language collapses support into intervention: I will help you, I will unblock you, I will make you better. The root-vegetable shirt proposes something quieter. You root for the person, and then you watch — which means you let the growth happen on its own schedule and you do not mistake your own impatience for their failure to develop. The four vegetables are not identical. The carrot is long and tapered, the beet is round, the onion is layered, the radish is small and quick. They are growing at different rates in the same soil. The design does not ask them to converge.

I read the ring of text as the soil line, in a loose visual sense: the sentence surrounds the plants the way the ground surrounds the roots. That is my interpretation of the layout, not a claim about what the artist intended. But it fits the drawing. The roots are inside the sentence, not below it. The support and the growth are in the same frame.

What the shirt does not promise

A slogan on a garment is not a policy. This one is careful enough to avoid the worst version of the mutual-growth idea, which is the demand that everyone grow continuously, measurably, and in a direction the organization has already chosen. Watch each other grow does not specify a rate, a metric, or a destination. It does not say grow faster or grow into this role. It says watch. That is a promise about attention, not about output.

I would still be cautious about wearing it into a performance review. The same sentence that reads as generous among peers can read as a management expectation when it comes from above. The difference is who is doing the watching and whether the person being watched has any say in the pace. The artwork cannot settle that question. It only supplies the words. The rest is context, and context is exactly what a printed sentence cannot control.

What the design does get right is the pairing of support with patience. The two halves of the sentence are not redundant. Rooting for someone is an attitude. Watching them grow is a practice, and a harder one, because it requires you to stay present without taking over. The smiling vegetables make the whole thing look easy. The sentence, read closely, does not.

Reading the object

The shirt is listed as Let’s Root For Each Other And Watch Each Other Grow Garden under the Quirky Cotton Collective brand. The design is a pun on gardening and mutual encouragement, and the four root vegetables — carrot, radish, beet, onion — are drawn with their roots visible in soil, which is the visual joke that makes the wordplay legible. If you are looking for the lets root for each other shirt as a gift for a gardener or a colleague who would appreciate the double meaning, the object is exactly what the artwork shows: a ring of text around four smiling plants, no more and no less.

What I would not do is treat it as evidence of anything. It is a shirt with a well-built pun on it. The argument I have made here is about how to read the sentence, not about what wearing it accomplishes. The design earns its place by being specific: four named vegetables, visible roots, a sentence that surrounds them. That specificity is why the joke lands, and why the second half of the sentence is worth taking seriously rather than smiling past.

Editorial note: This publication and Quirky Cotton Collective share an owner.

The shirt reads I WEAR THIS SHIRT PERIODICALLY in plain lettering, and beneath or beside it sit four periodic-table-style tiles: 53 I, 74 W, 22 Ti, 16 S. The tile symbols, read left to right, are I W Ti S. That is not a literal spelling of the sentence. It is a near-miss that the eye resolves into the sentence anyway, and the gap between what the tiles say and what the sentence says is the entire joke.

I want to take that gap seriously, because it is a small piece of design engineering. The shirt is not a chemistry lesson. It is a demonstration of how a visual system can carry a message it does not literally encode, and how much work the reader does to close the distance. That is a useful thing to notice in a garment, and it is a useful thing to notice in the systems we build.

Reading the tiles as tiles, not as letters

Each tile follows the visual grammar of the periodic table: an atomic number in the upper corner, a one- or two-letter symbol in the center. The numbers are real atomic numbers. Iodine is 53. Tungsten is 74. Titanium is 22. Sulfur is 16. The symbols are the real symbols for those elements. So the tiles are not decorative nonsense; they are correctly formed entries from a table that many readers learned to scan in a school laboratory.

But the sentence they are supposed to spell is I WEAR THIS SHIRT PERIODICALLY. The tiles give you I W Ti S. There is no tile for the ea in wear, no tile for the h in this, no tile for the hirt in shirt. The design does not try to hide that. It leans on the reader to hear the sentence while looking at the symbols. The pun is not in the tiles alone; it is in the collision between the tiles and the phrase printed above them.

That collision is what makes the shirt legible to two audiences at once. A chemist sees the tiles and reads the symbols. A reader who has never opened a periodic table sees the sentence and reads the words. Neither reading is wrong. The shirt works because it does not require you to choose.

The difference between a slogan and a usable promise

Most slogan shirts make a claim and stop. The claim is usually vague enough to be safe: trust me, I’m an engineer, there’s no place like 127.0.0.1, I’m not arguing, I’m just explaining why I’m right. These are social signals, not statements with truth conditions. They tell you something about the wearer’s tribe, and they ask you to smile.

This shirt is doing something slightly different. It makes a claim about frequency — periodically — and then it encodes that claim in a notation that has its own rules. The notation is not arbitrary. The atomic numbers are correct. The symbols are correct. The tiles are arranged in a way that a reader who knows the table can parse. The joke is not that the notation is wrong; the joke is that the notation is almost right, and the reader has to supply the missing letters.

That is a more interesting kind of shirt than a pure slogan, because it asks the reader to do a small amount of work. It rewards a specific kind of literacy — not deep chemistry, just enough familiarity with the table to recognize the format — and it does not punish anyone who lacks that literacy, because the sentence is printed in plain English. The shirt is inclusive in its reading and specific in its joke.

What the shirt does not claim

I want to be careful here. The shirt does not claim that the wearer is a chemist. It does not claim that the wearer understands the periodic table. It does not claim that the wearer works in a laboratory. It claims that the wearer wears the shirt periodically, which is a statement about laundry rotation, not about professional identity. The chemistry is the vehicle, not the message.

That distinction matters because it is easy to overread a garment like this. A shirt with element tiles is not a credential. It is a visual joke that happens to use a scientific notation as its medium. The joke is available to anyone who can read the sentence and see the tiles; the chemistry knowledge is a bonus, not a barrier.

I make this point because technical readers are often suspicious of science-themed merchandise that treats the notation as a decoration. This shirt does not do that. The tiles are correctly formed, and the pun depends on the correctness of the format. But the shirt is still a shirt, not a quiz. It does not ask you to balance an equation. It asks you to notice that I W Ti S is not I WEAR THIS SHIRT, and to enjoy the fact that your brain fills in the rest.

The design as a small system

If you look at the shirt as a system, it has three components: the plain-English sentence, the four element tiles, and the reader. The sentence sets the expectation. The tiles violate the expectation in a controlled way. The reader resolves the violation by hearing the sentence while seeing the symbols. The system works because the violation is small enough to be resolved and large enough to be noticed.

That is the same pattern you see in a good error message, a good diagram, or a good runbook. The system tells you what it is doing, then it does something slightly unexpected, and then it gives you enough context to recover. The shirt is not a runbook, but it is a well-formed piece of communication. It does not leave the reader stranded. It gives you the sentence and the symbols and lets you do the work.

I like that. I like objects that respect the reader’s attention enough to ask for a small amount of it. The shirt is not trying to be clever at your expense. It is trying to be clever with you.

Who this shirt is for

The shirt is for anyone who has ever enjoyed a pun that requires a second look. It is for people who like the periodic table as a visual system, not necessarily as a subject of study. It is for people who wear shirts with words on them and want the words to do something more than announce a mood.

It is also, frankly, for people who need a gift for a chemistry teacher, a lab technician, a science writer, or a friend who makes jokes about valence electrons. The shirt is available as a standard t-shirt from Quirky Cotton Collective, and the design is what it is: a sentence, four tiles, and a pun that works if you let it.

I am not going to tell you that the shirt will improve your lab technique or make you a better chemist. It will not. It is a shirt. But it is a shirt that has been designed with some care, and that is worth noticing.

A short checklist for reading the shirt

If you encounter this shirt in the wild, here is how to read it without overthinking it:

• Read the sentence first. I WEAR THIS SHIRT PERIODICALLY. That is the claim.
• Read the tiles second. 53 I, 74 W, 22 Ti, 16 S. That is the notation.
• Notice the gap. The tiles do not spell the sentence. They approximate it.
• Resolve the gap. Hear the sentence while seeing the symbols. That is the joke.
• Do not ask the shirt to do more than that. It is not a credential, a diagnosis, or a promise. It is a visual pun.

That is the whole design. It is small, it is specific, and it works. The shirt does not need to be more than that, and it should not be asked to be.

Editorial note: This publication and Quirky Cotton Collective share an owner.

The native garment preview shows large bold white lowercase meh. lettering on a dark shirt. No animal illustration is present. That is the whole design: four letters, a period, and a lot of empty dark fabric around them. The word is dismissive. The typography is not. That mismatch is the argument of the shirt, and it is worth reading carefully before you decide whether it belongs in your drawer or your donation pile.

Editor’s note: This publication and Quirky Cotton Collective share an owner.

Most slogan shirts fail because the slogan is doing all the work. The garment is a billboard for a joke, and the joke has to land in the two seconds a stranger spends reading your chest. Meh does not work that way. The word is a shrug. The lettering is a shout. If you print a shrug in a shout, you get something closer to a boundary than a punchline. That is the useful thing about this design, and it is also the thing that makes it easy to misread.

What the artwork actually does

Look at the proportions. The letters are lowercase, which softens the word, but they are set large and bold, which does not. The period is the tell. A period after a single word is a full stop, not a trailing off. Meh. is not the sound of someone who cannot decide. It is the sound of someone who has decided and is not going to explain it. The dark ground makes the white lettering carry across a room, which means the shirt is legible at the exact distance where a conversation would otherwise start.

That is a specific social function. It is not decoration. It is a wearable version of the phrase I have no opinion on this and I am not going to develop one, delivered in a typeface that refuses to be ignored. The contradiction is the point. A quiet refusal printed loudly is still a refusal, and it is one that does not require you to say anything out loud.

I want to be careful here, because it is easy to over-read a t-shirt. The design does not prove anything about introversion, dry humor, or the people who buy it. It is a visual object, and the only claims I can make are about what is on it. What I can say is that the visual loudness is doing work that the word alone would not do. A small, thin meh would be a mood. A large, bold meh. is a position.

Why the mismatch matters for the kind of reader who ends up here

This blog usually deals in power budgets, link margins, and the difference between a documented procedure and a procedure that survives contact with a 2 a.m. failure. But there is a recurring problem in that world that has nothing to do with hardware: the problem of the terse message. Operators who run small infrastructure learn quickly that a long explanation is a liability. You want the shortest string that produces the correct action. Meh. is not an operational message, but it is a useful study in how much a short string can carry when the presentation is right.

Think about the difference between a slogan and a usable promise. A slogan is something you wear. A usable promise is something someone else can act on. Most slogan shirts are slogans. This one is interesting because it is almost a usable promise: it tells the reader, in advance, that you are not going to engage. That is a boundary, stated in public, without a conversation. Whether that is a good thing depends entirely on the room you are standing in.

In a room full of people who already know you, the shirt is redundant. In a room full of strangers, it is a filter. In a room where you are expected to be helpful, it is a small act of refusal. None of those are engineering outcomes, and I am not going to pretend the shirt demonstrates anything about software, security, or systems. It is a garment. But it is a garment with a legible social instruction on it, and that is more than most of them manage.

The case for the loud version

If you are going to wear a word that means I decline to care, you have two options. You can print it small and hope the right people notice. Or you can print it large and let everyone notice. The small version is a private joke. The large version is a public statement. The design here is the large version, and I think that is the correct choice for the word. A small meh is apologetic. A large meh. is not.

There is a practical reason for that, too. Small text on a dark shirt is hard to read at a distance, which means it only works up close, which means it only works in conversations you are already in. Large text works before the conversation starts. If the point is to prevent the conversation, large is the only size that does the job.

You can find the shirt at the Amazon listing if you want to see the preview for yourself. The listing title mentions introvert and dry humor, which is retail language, not printed text. The only thing I can confirm is printed is the word meh. in large bold white lowercase letters on a dark shirt. Everything else is framing.

What would make this the wrong shirt

If you need people to read your shirt and laugh, this is probably not the one. The word is not a joke. It is a refusal. If you are in a role where you are expected to be warm, available, and helpful to strangers, a large meh. on your chest is working against you. If you want a shirt that signals a shared interest or a specific identity, this one does not do that. It signals a mood, and moods are not identities.

It is also worth saying that the shirt does not cure anything. It does not make you an introvert, it does not improve your boundaries, and it does not make you funnier. It is a piece of fabric with a word on it. The word is well set. That is the whole review.

A short checklist before you buy a word-shirt

If you are going to wear a single word in public, run it through this:

• Is the word doing the work, or is the type doing the work? If the word is weak, the type has to carry it. Meh. is weak on its own and strong in bold lowercase. That is a deliberate choice, not an accident.
• Does the punctuation change the meaning? Meh is a sound. Meh. is a decision. The period is the difference between a mood and a position.
• Is the shirt legible at the distance where it matters? If you want it read before a conversation starts, it has to work across a room. Large white on dark does that. Small text does not.
• Are you prepared to be read as the word? A loud meh. is not a private joke. It is a public instruction. If you are not prepared to be treated as someone who declines to engage, do not wear it.
• Does the retail description match the printed artwork? Titles and marketing copy are not the design. Look at the preview. The only thing printed here is the word.

That is the useful argument of this shirt. It is not a gag. It is a boundary, printed at a size that makes it impossible to miss. If that is the message you want to send, the design sends it clearly. If it is not, the shirt will send it anyway, and that is the risk you take when you let your clothing do the talking.

Editorial note: This publication and Quirky Cotton Collective share an owner. This is not an independent review.

The design is blunt: NOT FRIENDLY DO NOT TOUCH in warning-sign lettering, a yellow caution triangle, and a crossed-out hand. That is the whole graphic. No slogan underneath, no joke in smaller type, no escape hatch. If you have spent any part of your working life writing runbooks, you already know why that economy is interesting — and why it is also a trap.

I want to read this shirt the way I read a status page. Not because a t-shirt is infrastructure, but because the visual grammar it borrows — the caution triangle, the prohibition slash, the imperative verb — is the same grammar we use when we want a message to survive being skimmed by someone who is tired, distracted, or in a hurry. That grammar has rules. It also has failure modes. Most novelty warning-sign designs ignore both. This one, at least in its printed elements, mostly respects them.

What the artwork actually does

Three components, in order of visual priority:

1. The caution triangle. Yellow field, black border, black exclamation mark. In standard signage practice this is a hazard warning — it says something here can hurt you. It does not say keep out. That distinction matters, and I will come back to it.
2. The crossed-out hand. A prohibition symbol: a circle with a diagonal slash over a hand. This is the ISO 7010 P010 “do not touch” convention, or close enough to it that anyone who has walked past a server rack or a sterilizer will read it instantly. The hand is the object being prohibited; the slash is the instruction.
3. The lettering. All caps, heavy weight, no punctuation. “NOT FRIENDLY DO NOT TOUCH.” Two imperatives stacked without a comma. It reads less like a sentence and more like a pair of labels on the same panel.

What I notice is the redundancy. The triangle says hazard. The crossed-out hand says do not touch. The text says not friendly and do not touch. Three channels carrying roughly the same payload. In signage that is usually deliberate — you want the message to survive a glance, a language barrier, a bad angle, a dim room. On a shirt, it is doing something slightly different: it is making the wearer’s boundary legible from across a room without requiring conversation.

That is the useful argument here. This is not a shirt about being an introvert in the pop-psychology sense. It is a shirt about legibility under load — the same problem you solve when you put a red LED on a battery enclosure instead of a paragraph in a manual.

The triangle is a hazard sign, not a boundary sign

Here is where I think the design is more interesting than it first appears, and also where it is slightly off.

In standard signage, the yellow caution triangle means hazard ahead — slippery floor, high voltage, laser in use. It is about the environment, not about the person. The prohibition symbol — the circle with the slash — is the one that means do not do this thing. The two are not the same category. A hazard sign warns you; a prohibition sign instructs you.

This design uses both. The triangle sits above the text; the crossed-out hand sits beside or below it. So the shirt is simultaneously saying there is a hazard here and do not touch. Read literally, that is a little incoherent: if the hazard is the wearer, then the prohibition is redundant. If the hazard is something else, the prohibition is misplaced.

But read as a piece of visual rhetoric rather than a compliant sign, it works. The triangle borrows the authority of industrial warning language. The crossed-out hand borrows the clarity of a universal prohibition. Together they produce a message that is not quite a sign and not quite a slogan — it is a boundary expressed in the grammar of public infrastructure. That is a specific and slightly unusual move, and I think it is the reason the design reads as more than a novelty.

I am not claiming this is a deliberate semiotic strategy. I have no evidence about the designer’s intent. I am describing what the printed elements do when you look at them together, which is a different kind of claim.

What the shirt promises, and what it cannot

Every warning sign makes an implicit promise: if you read this, you will not be surprised. That is the whole point of standardizing the triangle and the slash. You do not need to know the language, the context, or the person who put the sign up. You just need to have seen the symbol before.

The shirt makes a similar promise, but the stakes are different. It says: if you approach me, you have been told. That is a real social function. It is also a promise the shirt cannot enforce. A warning sign on a fence works because the fence is there. A warning sign on a person works only if the person is willing to hold the boundary when someone ignores the sign — and if the people around them are willing to read it.

This is where the design is honest, and where a lot of boundary-themed apparel is not. It does not say I will be rude to you. It does not say I hate people. It says not friendly, do not touch. That is a statement about access, not about temperament. It is closer to a 403 Forbidden than to a 500 Internal Server Error. The resource is there. The method is not allowed.

I find that distinction useful because it maps onto a problem I run into constantly in small-team operations: the difference between a service that is down and a service that is up but not for you. A clinic’s patient records system is not broken when it refuses a request from an unauthenticated device. It is working correctly. The boundary is the feature.

The shirt is making the same move in social space. It is not a claim that the wearer is broken. It is a claim that the wearer has an access policy, and the policy is printed on the front.

The problem with slogans as promises

Here is the skeptical part, because I do not think this design is above criticism.

A slogan is not a policy. A policy has a scope, an enforcement mechanism, and a defined response when someone violates it. A slogan has none of those things. “Do not touch” on a shirt is a request, not a control. If someone touches you anyway, the shirt has not prevented anything. It has only documented that you asked.

That is not a reason to avoid the shirt. It is a reason to be clear about what it is for. If you wear it because you want a low-stakes way to signal I am not available for casual contact right now, it does that job reasonably well. If you wear it because you think it will stop the specific person who has never respected a boundary in their life, you will be disappointed. The shirt is a sign, not a bouncer.

I have the same complaint about a lot of technical documentation. A README that says “do not run this in production” is not a safeguard. It is a note. The safeguard is the code that refuses to start without an explicit flag. The note is still worth writing, because it shifts the burden of justification. But it is not the same thing as enforcement, and pretending otherwise is how you end up surprised.

The shirt, to its credit, does not pretend. It does not say “I will make you stop.” It says “not friendly.” That is a statement of current state, not a threat of future action. It is, in its way, more honest than most boundary merchandise.

Reading the design as a diagram

One more observation, because it is the kind of thing I notice and cannot un-notice.

The layout is essentially a three-line diagram: symbol, symbol, text. In engineering documentation, that is a common pattern — a block diagram with an icon for the component, a second icon for the state, and a label underneath. The eye reads top to bottom: hazard, prohibited, named. It is not a sentence. It is a stack.

That stacking is what makes the design work at a distance. You do not have to read the words to get the message. The triangle and the slash carry the payload; the text is confirmation. This is the same reason a good status dashboard uses color and shape before it uses words. The words are for the people who are already looking. The symbols are for the people who are not.

I do not know whether the designer thought about it this way. I am describing the artifact, not the intention. But the artifact has a structure, and the structure is legible, and that is more than you can say for most shirts with a joke on them.

Where it fits, and where it does not

If you are looking for a not friendly do not touch shirt — the exact design with the caution triangle and the crossed-out hand — this is the one I am describing. The listing is a standard t-shirt from Quirky Cotton Collective. I am not going to tell you it is soft, or that it fits well, or that it survived a hundred washes, because I have not worn it and I do not know. What I can tell you is what the printed elements are and what they are doing.

Where it fits: off-duty, low-stakes social settings where you want a boundary to be visible without having to announce it. Conferences, commutes, the kind of team offsite where you would rather not be the person who has to say “I need a minute” out loud. It is a costume for a mood, and it is honest about being a costume.

Where it does not fit: anywhere the boundary actually needs to be enforced. A shirt cannot do that work. If you are in a situation where someone is likely to ignore a verbal request, a printed one will not fare better. The shirt is a signal, not a shield. Treat it as the former and it will do its job.

That is the whole argument. The design is a small, well-built piece of visual rhetoric that borrows the authority of industrial signage to make a social boundary legible at a glance. It is not a solution to anything. It is a sign. And like any sign, it works best when the thing it is attached to is already doing the work.

A short checklist for reading boundary apparel

If you are going to wear a message, it is worth knowing what it can and cannot do. Here is how I would evaluate any shirt like this one:

1. Is the symbol standard? If it borrows a recognized convention — caution triangle, prohibition slash, ISO 7010 — it will be read correctly by more people. If it invents its own symbol, it is decoration, not signage.
2. Is the text redundant with the symbol, or does it add information? Redundancy is fine for legibility. Contradiction is not.
3. Does it promise enforcement it cannot deliver? “Do not touch” is a request. “I will make you stop” is a threat. The first is honest; the second is not.
4. Does it survive a glance? If you have to read the whole thing to get the message, it is a paragraph, not a sign.
5. Is the wearer prepared to hold the boundary? This is the one the shirt cannot answer. It is also the only one that matters.

The design passes the first four. The fifth is up to you.

When the utility announces Stage 2, the first thing an operator wants to know is: how long will my site be dark? The published schedule does not answer that question. It answers a different one: how many megawatts will be shed nationally, and what block window has been assigned to your area. Those are not the same thing, and the gap between them is where capacity plans fail.

This article is about reading the schedule correctly. Not as a promise, but as a planning envelope — a published error budget you can size against, provided you understand what it does and does not commit to.

What the published schedule actually commits to

Eskom’s schedule interpretation page is explicit about the stage-to-megawatt mapping. Each stage allows a specific additional amount of national load to be shed:

Stage 1 allows for up to 1000 MW of the national load to be shed. Stage 2 allows for up to 2000 MW of the national load to be shed. Stage 3 allows for up to 3000 MW of the national load to be shed. Stage 4 allows for up to 4000 MW of the national load to be shed. Stage 5 allows for up to 5000 MW of the national load to be shed. Stage 6 allows for up to 6000 MW of the national load to be shed. Stage 7 allows for up to 7000 MW of the national load to be shed. Stage 8 allows for up to 8000 MW of the national load to be shed.

That is a national figure. It tells you nothing about your site. The per-site numbers are elsewhere on the same page: block length and the switching window.

For stages 1 to 4, most of the country runs 2-hour blocks. Eskom-supplied Johannesburg areas run 4-hour blocks to match City Power’s schedule. Each block gets an additional 30 minutes for switching, so a 2-hour block can mean up to 2.5 hours without power, and a 4-hour block up to 4.5 hours.

As stages climb, two things happen. The frequency of cuts increases, and from stage 5 upward the 2-hour blocks progressively double to 4 hours. The schedule states this directly:

Customers will expereince that the frequency of load shedding (ie the number of scheduled times per day) increases as higher Stages of load shedding are activated. Also, customers in areas that experience 2 hour blocks in Stages 1 to 4, will find that the length of these blocks is doubled progressively to 4 hours as stages 5 to 8 are activated.

So the schedule does commit to some things. It commits to a national MW figure per stage. It commits to a block design — 2 hours or 4 hours depending on area — and a 30-minute switching window. It commits to an escalation pattern where higher stages mean more frequent cuts and, from stage 5, longer blocks.

What it does not commit to is your site’s actual outage duration on any given day. The schedule page itself says the information is for “information purposes” only and that Eskom makes no representations or warranties regarding its accuracy or suitability. It also states that if more load needs to be shed than has been scheduled in Stages 1 to 8, National Control will instruct additional, unscheduled load shedding, meaning you may be shed outside your scheduled times.

That is not a criticism of Eskom. It is a description of what the document is. It is a national dispatch plan, not a service-level agreement with your clinic, your ISP node, or your workshop.

Why ‘SLA’ is a useful model but a dangerous assumption

An SLA has three components: a counterparty, a defined measurement method, and a remedy. The published load-shedding schedule has none of these for an individual site.

The counterparty is the System Operator, but the schedule explicitly states that the code does not subrogate any actions the System Operator may deem necessary in real time to ensure the security of the national power system, including prudently managing system operating reserves. In plain terms: the schedule can be overridden when the grid is at risk. That is the correct engineering decision. It is also the reason you cannot treat the schedule as a commitment.

The measurement method is national MW, not your site’s uptime. The remedy is nonexistent. There is no credit, no penalty, no escalation path for a site that was shed outside its block.

So why use the SLA frame at all? Because it forces you to ask the right questions. If this were an SLA, what would I measure? What would I size against? What would I do when it is breached? The answers to those questions are useful even when the SLA itself does not exist.

The only per-site numbers you can plan against

Strip away the national MW figures and the stage headlines. What remains that is specific to your site?

• Block length. Two hours in most areas during stages 1 to 4, four hours in Eskom-supplied Johannesburg areas, and progressively four hours from stage 5 upward in areas that normally run 2-hour blocks.
• Switching window. An additional 30 minutes per block, added to allow for safe switching of networks.
• Cut frequency at your stage. The schedule publishes expected cut counts per stage over a four-day or eight-day period. Stage 4, for example, means up to 12 cuts over four days in a 2-hour block area.

Everything else — whether your municipality follows the same block design, whether your specific feeder is shed on the published schedule, whether an unscheduled event adds a cut — is outside the published commitment. Eskom’s own page notes that municipality and metro schedules differ from Eskom schedules in design and detail, and that Eskom has no control over how municipalities or metros determine their own schedules.

If you are supplied by a metro, your block design is your metro’s, not Eskom’s. The switching window may differ. The cut counts may differ. The only way to know is to pull your metro’s schedule and read it as its own document.

A worked example: sizing a one-person clinic branch

This is a hypothetical. It uses only the published block lengths and switching window. It does not use vendor performance data, measured runtime, or any claim about what a specific battery or generator will do. The point is the method, not the numbers.

Suppose you run a one-person clinic branch on a 2-hour block area. You are on Stage 4. The schedule says up to 12 cuts over four days, 2 hours each, plus the 30-minute switching window. That is up to 2.5 hours per cut, and up to three cuts per day on average.

Your critical load is a vaccine fridge, a laptop, a router, and a light. You want to size battery runtime and generator fuel.

Step 1: Size for the longest block, not the average. The schedule allows 2.5 hours per cut at Stage 4. But Stage 5 doubles some blocks to 4 hours, and Stage 6 mixes 2-hour and 4-hour blocks. If you size for 2.5 hours, you are sized for Stage 4. If you want to survive Stage 6 without intervention, you need to size for 4.5 hours — the 4-hour block plus the switching window.

Step 2: Count the cuts, not just the hours. Three cuts per day at 2.5 hours each is 7.5 hours off per day. That is not the same as one 7.5-hour outage. Your battery has to recharge between cuts. If your recharge window is short — say, two hours between an evening cut and an overnight cut — your effective runtime is less than the nameplate capacity suggests. The schedule’s cut frequency is a planning input, not just the block length.

Step 3: Plan for the unscheduled cut. The schedule explicitly allows unscheduled load shedding when more load must be shed than Stages 1 to 8 provide. That means your worst case is not the published block. It is the published block plus an additional cut that you did not plan for. For a one-person site, the manual fallback is usually a small generator or a second battery bank that can be brought online without intervention. The cost of that fallback is the price of not being surprised.

Step 4: Re-run the plan at the next stage up. A plan sized for Stage 2 is not a plan sized for Stage 6. The schedule’s own escalation rules — more frequent cuts, longer blocks from stage 5 — mean that your capacity plan should be expressed as a range, not a single number. At minimum, know what stage your current plan survives, and what stage it does not.

Two failure modes of reading the schedule as an SLA

Failure mode 1: Assuming the headline stage applies to your slot all day. The announced stage is a national figure. It can vary by time of day. A Stage 6 headline does not mean every hour is Stage 6. Your block’s times matter more than the headline. If you plan against the headline and your block lands in a lower-stage window, you are over-provisioned. If it lands in a higher-stage window, you are under-provisioned. The schedule publishes block times for a reason. Use them.

Failure mode 2: Assuming your municipality’s block design matches Eskom’s. Eskom’s page is clear that municipality and metro schedules differ in design and detail, and that Eskom has no control over how they are determined. If you are a metro customer, your block length, cut frequency, and switching window may all differ. Pull your metro’s schedule. Read it as its own document. Do not assume the Eskom page applies to you.

What the schedule is not

It is not a guarantee of outage duration. It is not a guarantee of cut frequency at your site. It is not a commitment that your municipality follows the same design. It is not a remedy if your site is shed outside its block.

It is a published planning envelope. It tells you the national MW figure, the block design for your area, the switching window, and the escalation pattern. Those are real numbers. They are enough to size a capacity plan, provided you treat them as inputs to a plan rather than promises to rely on.

The NRS 048-9 code of practice, which governs load reduction in South Africa, describes load shedding as a controlled intervention affecting a limited number of customers at a time, distinct from a blackout which happens without warning and can affect many or all customers for an unpredictable period. That distinction matters. Load shedding is controlled. It is not a blackout. But it is also not an SLA. It is a controlled intervention that can be overridden in real time to prevent a national blackout, and the code explicitly preserves that override.

For a one-person site, the useful planning unit is not the stage. It is the longest continuous outage the site must survive without intervention. That is a function of block length, switching window, and whether the site can be re-energised unattended. The national MW figure does not enter into it.

A planning checklist

1. Confirm who supplies you. Eskom direct or a municipality/metro. The schedules differ. The block design may differ. The switching window may differ.
2. Pull your own block times. Not the headline stage. Your area’s block times, for the current stage. The schedule publishes them by area.
3. Size for the longest block your stage can produce, plus the switching window. At Stage 4 in a 2-hour block area, that is 2.5 hours. At Stage 6, it is 4.5 hours. Know which one you are sized for.
4. Count the cuts, not just the hours. Recharge windows between cuts matter. Three 2.5-hour cuts in a day is not the same as one 7.5-hour outage.
5. Plan for the unscheduled cut. The schedule allows it. Your plan should survive it without intervention, or have a manual fallback that does not require someone to be awake at 3 a.m.
6. Treat any stage change as a schedule change, not a breach. The stage can change with a few hours’ notice. Your plan should have a defined response to a stage change, not a complaint.

FAQ

Does the published schedule guarantee my site will be off for the full block? No. The schedule publishes block length and a switching window. It does not guarantee that your site is shed for the full block, or that it is shed at all. It also allows unscheduled load shedding when more load must be shed than Stages 1 to 8 provide.

My metro publishes a different schedule. Which one applies to me? Your metro’s schedule applies to you if your metro supplies you. Eskom’s page states that municipality and metro schedules differ in design and detail, and that Eskom has no control over how they are determined. Pull your metro’s schedule and read it as its own document.

How do I know what stage my area is on right now? The current stage is displayed on Eskom’s main website and load-shedding site, and on the MyEskom app. Third-party apps republish the same data. Eskom notes that it cannot guarantee third-party providers are using the latest data, but that they can be a useful alternative service.

What is the difference between load shedding and load reduction? Load shedding is a national, rotational intervention declared by stage. Load reduction is a local intervention to protect overloaded infrastructure, typically published by feeder or suburb. They are different schedules with different triggers. If your power is off on a clockwork schedule while the rest of the country is on, you are likely looking at load reduction, not a stage.

Should I size my battery for the headline stage or the block length? Size for the longest block your stage can produce, plus the switching window. The headline stage is a national MW figure. The block length and switching window are the per-site numbers. If you want to survive a stage change without intervention, size for the next stage up as well.

The bottom line

The published load-shedding schedule is a planning envelope, not an SLA. It gives you a national MW figure per stage, a block design for your area, a 30-minute switching window, and an escalation pattern. Those are enough to size a capacity plan. They are not enough to promise your site will be dark for exactly 2.5 hours on a given day.

Read the schedule for what it commits to. Plan for what it does not. And when the stage changes, treat it as a schedule change, not a breach. The grid is not your counterparty. It is a system you are planning around.

The shirt shows a diagram before it shows a joke. In white capitals across the chest: I HAD POTENTIAL. Below the words, a curved ramp descends from an upper left ledge to a lower right flat. At the top of the ramp, on the upper left ledge, sits a dashed empty circle. At the bottom, on the lower right flat, rests a solid white ball. The ramp is curved, not a straight diagonal. That curve is the whole argument.

Most slogan shirts stop at the sentence. This one asks you to read a small physics diagram first, and the diagram changes what the sentence means. The dashed circle at the top is where the ball used to be. The solid ball at the bottom is where it ended up. The gap between them is the distance the ball traveled, and the curve is the path it took. The shirt is not saying I had potential and lost it. It is saying I had potential and here is the trajectory.

That distinction matters because it turns a complaint into a measurement. A dashed outline is a boundary, not an object. In drafting, a dashed line marks something hidden, projected, or no longer present. The empty circle at the top of the ramp is the ball’s starting position, drawn as a ghost. The solid ball at the bottom is the ball’s current position, drawn as fact. The shirt presents two states of the same system and lets you infer the motion between them. It is a before-and-after diagram disguised as a punchline.

The curved ramp is the second clue. A straight diagonal would suggest a simple slide, a constant grade, a steady decline. A curve suggests acceleration, or at least a changing slope. The ball did not roll down a uniform incline. It followed a path that steepened or eased, and the drawing does not tell you which. That ambiguity is honest. Most declines are not linear. A project stalls, a skill rusts, a plan meets a constraint that was not in the original estimate. The curve is the shape of a fall that had phases.

I read the dashed circle as the more interesting mark. It is the only element on the shirt that is not solid. Everything else — the words, the ramp, the ball — is printed in white. The dashed circle is an absence rendered visible. It says: this is where the potential was. The shirt does not claim the potential is gone. It claims the potential is elsewhere. The ball still exists. It is just at the bottom of the ramp now.

That is a different emotional register from the usual sarcastic slogan. The standard version of this joke is a flat statement of failure: I had potential, full stop, with the implication that the speaker did not live up to it. The diagram adds a second layer. It shows the mechanism. The ball did not evaporate. It moved. The potential was converted into something else — kinetic energy, heat, noise, distance. The shirt is a closed system. Nothing is lost. It is just redistributed.

For readers who spend their days inside systems that fail in nonlinear ways, this is a familiar shape. A service does not go from healthy to dead in a straight line. It degrades along a curve. A battery does not drop from 100 percent to zero at a constant rate. It sags, recovers, sags again, and then falls off a cliff. The ramp on the shirt is a reminder that decline has a profile. The dashed circle is the state you remember. The solid ball is the state you are in.

The shirt is available as a standard t-shirt through the listing at https://www.amazon.com/dp/B0HLW9KDZY. The design is minimal: white print on a dark garment, no additional graphics, no border, no caption beyond the four words. The restraint is part of the point. A busier shirt would explain the joke. This one lets the diagram do the work.

What I appreciate most is that the shirt does not ask for sympathy. It does not say I could have been something. It says I had potential, past tense, and then shows you the ball at rest. The ball is not broken. It is not missing. It is sitting on a flat ledge at the bottom of a curve, and the dashed circle above it is the only evidence that it was ever anywhere else. That is a precise statement about a common experience: the feeling of being at the end of a trajectory you did not fully choose, looking back at the outline of where you started.

The shirt works as a diagram joke because the diagram is not decorative. Remove the ramp and the ball, and you have a generic sarcastic slogan. Keep them, and you have a small physics problem: given a curved ramp, a starting position, and a final position, what happened in between? The shirt does not answer that question. It just presents the data. The wearer supplies the rest.

Editorial note: This publication and Quirky Cotton Collective share an owner.

Editorial note: This publication and Quirky Cotton Collective share an owner. This is not an independent review.

The first thing I noticed on the Composition Notebook Costume Teacher Group Halloween shirt was not the ghost. It was the margin.

The printed artwork is a black-and-white speckled rectangle, the kind of mottled cover that has been on school supply lists for decades. A dark binding strip runs down the left edge. Inside the rectangle, a white ruled label is headed COMPOSITION in block capitals. Below that heading, an outlined ghost and an outlined pumpkin sit inside the label area. The whole thing is a printed notebook cover, not a physical notebook. The shirt is the surface, not the object.

That distinction matters more than it sounds. A costume shirt usually works by addition: add a slogan, add a mascot, add a joke. This one works by substitution. It asks you to read a person as a writing surface. The ghost and pumpkin are not the point; they are the proof that the surface is seasonal. The notebook is the point.

Why the notebook cover reads differently than a slogan

I have spent enough time around terse messages to be suspicious of slogans. A slogan is a promise with the edges sanded off. It tells you what to feel and leaves no room for the failure mode. A notebook cover does the opposite. It is a container. It implies that something will be written, erased, crossed out, and written again. The ruled label is not decorative; it is an instruction. Write here.

That is a different kind of costume. It does not say “I am a teacher” in words. It says “I am the thing the teacher uses.” The ghost and pumpkin are the only concession to Halloween, and they are small. They sit inside the label, not across the chest. If you cover the label with your hand, you are left with a speckled rectangle and a binding strip. That is a remarkably restrained design for a group costume.

I interpret the restraint as the argument. The shirt is not trying to win a costume contest on its own. It is trying to make a group of people legible as a set. A row of these shirts reads as a shelf of notebooks. The individual wearer disappears into the pattern, which is exactly what a group costume is for.

The group costume problem

Group costumes fail in predictable ways. Someone wears the wrong color. Someone’s shirt arrives with a different print scale. Someone decides to be the exception. The composition notebook design avoids most of that by being almost aggressively uniform. The speckle pattern is black and white. The binding strip is dark. The label is white with black rules. There is no accent color to mismatch, no font to argue about, no character to cast.

That uniformity is the feature. If you are organizing a teacher group costume, you do not want a design that requires coordination beyond “everyone wears the same shirt.” You want a design that looks intentional even when half the group is standing in bad fluorescent light. A notebook cover does that. It is a flat, high-contrast graphic that survives distance and bad lighting.

The ghost and pumpkin complicate that slightly. They are outlined, not filled, which means they read as line art rather than as characters. At a distance, they blur into the label. Up close, they register as Halloween. That is a reasonable trade-off for a shirt that has to work in October and not embarrass anyone in September.

What the design does not claim

I want to be careful here. The shirt does not claim that teachers are notebooks. It does not claim that writing is magic. It does not claim that a group of adults in matching shirts will be mistaken for a stationery aisle. It is a printed garment with a notebook cover on it. The ghost and pumpkin are outlined shapes. The label says COMPOSITION. That is the whole inventory.

Any meaning beyond that is my reading, not a property of the object. I read the ruled label as an invitation to write. I read the speckled cover as a familiar surface. I read the group costume as a way to make a team legible without asking anyone to perform. Those are interpretations. They are not claims about what the shirt does.

The shirt also does not claim to be a physical notebook. The retail image shows a printed notebook cover, not a bound book. If you are looking for a costume that involves carrying a prop, this is not that. If you are looking for a costume that is entirely on the body, this is exactly that.

The off-duty object question

Technical readers tend to have a complicated relationship with uniforms. We spend our working lives trying to make systems legible, and we are suspicious of anything that looks like a costume. But there is a difference between a uniform that hides the person and a uniform that makes the group visible. A composition notebook shirt is the second kind. It does not ask you to be a character. It asks you to be one page in a set.

That is a useful thing to have in a drawer. Not because it is clever, but because it is legible. It solves a specific problem: how do you show up as a group without asking everyone to buy a costume. The answer is a surface everyone already knows.

The ghost and pumpkin are the only part of the design that will date. They are Halloween-specific. The notebook cover is not. If you wear this shirt in November, you are wearing a notebook cover with two small seasonal outlines. That is a minor compromise, and it is the price of a design that works in October.

A short checklist for reading the design

If you are considering this shirt for a group costume, here is what I would check before ordering:

• Read the label, not the slogan. The design is a notebook cover. The ghost and pumpkin are inside the label. If you want a shirt that says “teacher” in words, this is not it.
• Check the group uniformity. The speckle pattern is black and white. The binding strip is dark. There is no accent color to mismatch. That is the point.
• Decide about the season. The ghost and pumpkin are Halloween-specific. The notebook cover is not. If you need a shirt that works year-round, the seasonal outlines are a compromise.
• Do not expect a prop. The shirt is a printed notebook cover, not a physical notebook. The costume is entirely on the body.
• Read the surface, not the promise. The ruled label is an invitation to write. It is not a claim about teaching, learning, or anything else. It is a surface.

That is the whole argument. The composition notebook shirt is not a slogan. It is a surface that makes a group legible. The ghost and pumpkin are the seasonal proof. The notebook is the point.

At 02:00, the only person in the building is the night guard. The operator is asleep, the NOC does not exist, and the second site is a fantasy. When something goes wrong — a beeping UPS, a burning smell, a dead link — the guard is the entire incident response team until someone wakes up.

Most operators handle this by telling the guard, “Call me if anything looks wrong.” That instruction fails. It fails because “anything” is undefined, because “wrong” is a judgment the guard has not been trained to make, and because a guard who calls about nothing gets scolded while a guard who calls about everything gets ignored. The result is either silence or noise, and neither is a usable report.

The fix is a laminated card taped inside the rack door. It is not a manual. It is a five-minute decision script that turns a non-technical guard into a reliable sensor and a reliable stop-button. The card does not make the guard a technician. It gives them a small, ordered set of things to check, a short list of things never to touch, and a fixed set of facts to report before they call.

Why a card, and not a wiki or a group chat

A wiki page is useless when the power is out and the guard’s phone is at 4% battery. A group chat assumes connectivity that may be the very thing that failed. A phone tree assumes the guard has the numbers memorized or can find them in the dark. A laminated card survives all of these: it needs no power, no login, no signal, and no literacy beyond the script itself.

This is a deliberate downgrade in fidelity and an upgrade in survivability. The card cannot hold the full runbook. It should not try. Its job is to cover the first five minutes — the window in which the wrong action (flipping a breaker, unplugging a storage array, opening a door with smoke behind it) causes more damage than the original fault.

Ready.gov’s business continuity guidance recommends that organizations organize a continuity team and compile a plan to manage disruption, and its planning process includes steps to identify and prioritize risks, define teams and tasks, and test the plan. A rack card is the smallest useful unit of that work: it names the first responder, gives them a bounded task, and gets tested. The full plan can live elsewhere; the card is what the person on site actually holds.

Design constraints that matter more than content

Before writing a single line, accept these constraints. They are not stylistic preferences; they are what makes the card work at 02:00.

• One page, one side. If it needs to be turned over, it will not be read. If it needs two pages, it will be lost.
• Large type. The guard may be reading by phone light or emergency lighting. Ten-point text is invisible.
• Local language first, shared language second. Write the script in the guard’s first language. Put a short version in the operator’s language below it. Translation is cheaper than a misdiagnosis.
• No jargon, no acronyms. “UPS” becomes “the big battery box.” “Switch” becomes “the box with many blinking lights.” If the guard has to decode a term, the card has failed.
• No login required. The card must not depend on a password, a phone app, or a portal. It is paper.
• Three copies. One inside the rack door, one inside the breaker panel cover, one at the guard post. One will go missing. That is normal.

The five-minute script

The script is ordered by irreversibility, not by severity. People first. Then anything that destroys data or hardware. Then service restoration. Then evidence. A guard who follows this order will never make an incident worse, even if they cannot make it better.

Step 1: Confirm what is actually happening (60 seconds)

The card lists four observable conditions. The guard reads them and reports which are true. No interpretation, no diagnosis.

1. Is there smoke, fire, or water on the floor?
2. Is there a burning smell, a buzzing sound, or a hot surface?
3. Are the lights on the equipment off, red, or blinking in a pattern that is different from normal?
4. Is the internet or phone service down for the whole building, or only for one device?

These four questions are deliberately binary. The guard does not need to know what a “red light” means. They need to know whether the light is red. The operator interprets.

Step 2: Protect people first (30 seconds)

If there is smoke, fire, or standing water near electrical equipment, the guard does not enter the room. The card says this in plain language: Do not enter. Do not touch the equipment. Leave the building and call the fire service. This is not a technical decision. It is a safety decision, and it is the one place where the card must be absolutely unambiguous.

The card should also state what the guard is not authorized to do: reset breakers, unplug storage, open equipment cases, or pour water on anything electrical. These prohibitions protect the guard from injury and protect the operator from a second, self-inflicted outage.

Step 3: Protect the service second (60 seconds)

If there is no immediate danger, the guard checks whether the problem is power or network. The card gives two simple tests:

• Is the big battery box (UPS) beeping or showing a red light?
• Is the router or switch showing lights on the front?

If the UPS is beeping and the router is dark, the problem is likely power. If the UPS is quiet and the router is dark, the problem is likely the router or the line. The guard does not fix either. They report which one is true.

The card should not ask the guard to reboot anything. A blind reboot can erase logs, interrupt a firmware update, or bring a failing disk back online in a way that destroys data. The guard’s job is to observe and report, not to restore.

Step 4: Preserve evidence (30 seconds)

Before calling, the guard writes down four things on the back of the card or in a notebook kept at the post:

• The time they first noticed the problem.
• Which of the four conditions from Step 1 are true.
• What they can see on the equipment (lights, sounds, smells).
• Whether they touched anything.

This takes thirty seconds and gives the operator a usable report. It also creates a record that can be compared against the next incident. Without it, every event is a new mystery.

Step 5: Escalate with a fixed set of facts (60 seconds)

The card lists the operator’s number first, then a backup number, then the local electrician or ISP. The guard calls in that order. If the first number does not answer within two minutes, they call the second. The card says this explicitly, because a guard who is told “call me” will often call once, get no answer, and then do nothing.

The script for the call is on the card:

“This is [name] at [site]. I am at the rack. The time is [time]. I see [condition]. I have not touched anything. I need you to tell me what to do next.”

That is the whole call. It is short, it is factual, and it gives the operator the three things they need to decide whether to get out of bed: what, where, and whether the guard is safe.

What the card should never say

The card is also a contract. It tells the guard what they are authorized to do and, more importantly, what they are not authorized to do. This protects both the guard and the service.

Never include instructions to:

• Reboot a server, router, or switch.
• Unplug or move storage devices.
• Reset a breaker or replace a fuse.
• Enter a room with smoke, fire, or standing water.
• Open any equipment case.
• Use a fire extinguisher on electrical equipment unless trained.

These prohibitions are not insults to the guard’s intelligence. They are recognition that the guard has not been trained to make these decisions, and that the cost of a wrong decision is higher than the cost of waiting.

How to test the card

A card that has never been tested is a guess. Ready.gov’s continuity planning process includes a step to test the plan; the same applies here. The test is a tabletop walkthrough with the actual night guard, using a hypothetical scenario. It takes twenty minutes.

Sit with the guard. Read the card together. Ask them to walk through what they would do if the UPS started beeping at 02:00. Listen for confusion. If they hesitate at any line, rewrite that line. If they ask a question the card does not answer, add the answer or remove the ambiguity.

Then revise the card after every real event. If the card has not changed in a year, either nothing has happened or nobody is reading it. Both are worth knowing.

What this costs, and when it is wrong

The card costs almost nothing. Printing and laminating three copies is a few hundred naira, shillings, or rupees. The real cost is the hour spent writing it and the twenty minutes spent testing it. That is the trade-off: an hour of the operator’s time in exchange for a guard who can give a usable report instead of a panicked call or silence.

It is wrong under specific conditions. If the site has a trained technician on call within minutes, the card is redundant. If the guard is not literate in any language the operator can write, the card must be replaced with a pictorial version or a phone call to a supervisor who can read it aloud. If the equipment is in a location the guard cannot safely reach, the card should say so and direct the guard to stay away. And if the operator is never reachable by phone, the card needs a different escalation path — a neighbor, a local electrician, or a partner organization — or it is just paper.

The card is not a substitute for a second site, a NOC, or a return policy. It is what you do when you have none of those things and one person on site who deserves a clear, bounded, and safe set of instructions.

Frequently asked questions

What if the guard cannot read?

Use pictures and color codes. A red square next to a drawing of smoke means “leave and call the fire service.” A green circle next to a drawing of a phone means “call this number.” The script can be recorded as a voice memo on a cheap phone and played back. The principle is the same: give a bounded, ordered set of observations and actions that do not require reading.

Should the card include the operator’s number in plain text?

Yes. The guard should not have to unlock a phone, find a contact, and hope the battery is charged. The number should be on the card, in large type, with a backup number below it. If the operator is worried about the number being seen by visitors, use a dedicated SIM for on-call duty and change it if the card is lost.

How often should the card be updated?

After every real incident, and at least once a year. The update should be small: a clarified line, a new phone number, a removed ambiguity. If the card needs a major rewrite, the site’s setup has probably changed enough that the whole script should be revisited.

Does this comply with NIST or any standard?

No. NIST’s Cybersecurity Framework is a voluntary framework for managing cybersecurity risk, and Ready.gov’s continuity guidance is general business advice. Neither requires a rack card. The card is a local practice that borrows the logic of those frameworks — identify risks, define roles, test the plan — and reduces it to a single page that works when nothing else does.

What about the 2.2 billion people who are still offline?

ITU estimates that 2.2 billion people remain offline, and roughly 6 billion, or 74 per cent of the world’s population, were using the Internet in 2025. That context matters because it describes the environment many of these sites operate in: intermittent connectivity is not an edge case, it is the normal condition. A card that assumes connectivity is a card that fails when it is needed most.

The point

The card is not about the guard. It is about the operator. It forces the operator to decide, in advance, what matters, what is safe, and what the first five minutes should look like. That decision is the difference between an incident and a disaster. The guard just reads the card.

You are the only person who knows the router password, the billing portal login, the SIM PIN, and which breaker feeds the radio. You want two weeks off. The problem is not trust. The problem is that your absence is a single point of failure, and no one else has the context to recover from it.

This is a procedure for making that absence survivable. It has three parts: a handover document that tells a competent stranger what to do, a break-glass envelope that gives them the credentials to do it, and a phone that rings when something goes wrong. Each part has a cost and a failure mode it does not survive. I will state both.

Start with what actually breaks

Before writing anything, list the things that will page you at 2 a.m. if you are gone. For a community ISP, that is usually the upstream link, the billing system, and the tower power. For a rural clinic, it is the patient records server and the lab printer. For a fintech branch, it is the agent float and the transaction terminal. For a small factory, it is the PLC network and the payroll file.

Rank them by what happens if they stay down for four hours, one day, and one week. The four-hour list is what the handover doc must cover. The one-week list is what the break-glass envelope must cover. The rest can wait until you are back.

RFC 2196, the Site Security Handbook, makes the same point in its risk assessment section: identify the assets, identify the threats, then implement measures that protect assets in a cost-effective manner. It also warns that the cost of protection should be less than the cost of recovery, counting losses in real currency, reputation, and trustworthiness. That is the right frame here. A handover doc that costs you a weekend to write is cheap if it prevents a week of downtime.

The handover document

The handover doc is not a runbook. A runbook assumes the reader knows the system. The handover doc assumes the reader has never seen your network and is mildly annoyed to be reading it.

Write it in this order:

1. What this is. One paragraph: what the system does, who depends on it, and what happens if it stops.
2. What you can safely ignore. List the alerts and warnings that are normal. This is the single most valuable section for a stand-in. Without it, they will chase ghosts.
3. The five things that actually matter. For each: symptom, likely cause, first action, who to call if that fails.
4. Access map. Where the credentials live, how to get them, and what each one opens. Do not put the credentials themselves in this document. Point to the envelope.
5. Contacts. Upstream provider, hardware vendor, landlord, power utility, and one person who knows you well enough to say “Felix would not do that.”
6. What not to do. The changes that look helpful but will make things worse. Factory-resetting the router. Reinstalling the billing database. Calling the upstream provider and asking them to “reset everything.”

Keep it under ten pages. If it is longer, the stand-in will not read it. Print two copies. One goes in the envelope. One goes in a drawer that the stand-in can find without calling you.

NIST SP 800-53 Rev. 5 is the reference catalog for this kind of control. It is written for organizations with security programs, not one-person teams, so do not try to implement it wholesale. But two control families are worth reading directly: Contingency Planning (CP) and Access Control (AC). The CP family covers what you are doing here. The AC family covers who is allowed to do it. The publication is free and the control text is specific enough to be useful even if you ignore the assessment procedures.

The break-glass envelope

The break-glass envelope is a physical envelope containing the credentials the stand-in needs to recover from the one-week list. It is sealed, signed across the flap, and stored somewhere the stand-in can reach without breaking into your house.

What goes in:

• Local admin password for the router and the server.
• Login for the upstream provider portal.
• Login for the billing or records system, with a note on what not to touch.
• SIM PIN and the number to call for a PUK if the SIM locks.
• One-time recovery codes for any account with two-factor authentication.
• A written note: “If you open this, call me. If I do not answer within 24 hours, proceed.”

What does not go in: your personal email password, your bank login, or anything that gives access to systems outside the one-week list. The envelope is for recovery, not for convenience.

The trade-off is real. A sealed envelope in a drawer is a physical attack surface. Someone with access to the drawer can open it, use the credentials, and reseal it badly. You will not know until you check the signature. The mitigation is to check the signature when you return and to rotate every credential in the envelope after any use, planned or not. That rotation costs you an afternoon. It is the price of the envelope.

If the stand-in is in a different city, the envelope becomes a problem. Options: a sealed envelope with a trusted third party, a safe with a combination that is split between two people, or a cloud password manager with emergency access. Each has a failure mode. The third party can lose it. The safe can be opened without you knowing. The cloud manager depends on the internet, which is the thing you are trying to survive. Pick the one whose failure mode you can live with.

The phone that must ring

The stand-in needs to know when something is wrong. If your monitoring sends alerts only to your phone, your absence is invisible until a customer calls.

Set up a second alert path that does not depend on you. The cheapest version is a prepaid SIM in a cheap phone that lives with the stand-in, with your monitoring system configured to send SMS to that number. The cost is the phone plus airtime, maybe 15,000 to 25,000 naira in Nigeria or the equivalent in shillings or rupees. The failure mode it survives is your phone being off, lost, or out of coverage. The failure mode it does not survive is the monitoring system itself being down, which is why the stand-in also needs a way to check the system manually.

Be careful with alert volume. A stand-in who gets forty SMS messages a day will stop reading them. Route only the four-hour list to the second phone. Everything else can wait.

If your monitoring depends on the same internet link that carries your customers’ traffic, it will go down with the link. That is a design flaw, not a monitoring flaw. The fix is a second path, even if it is a cheap 2G modem that only sends SMS. ITU data shows that mobile-cellular coverage is far more widespread than fixed broadband in most of the regions this blog serves, so a 2G or 3G SMS path is often the most reliable option available. Check the ITU statistics for your country before assuming a second fixed line is possible.

What about the legal and regulatory side

If you run a clinic, a fintech branch, or anything that touches patient or customer data, the break-glass envelope is not just an operational decision. It is a data protection decision. The person holding the envelope may be able to see records they are not authorized to see.

NIST publishes a Privacy Framework that is a voluntary tool for managing privacy risk. It is not a law and it does not tell you who may hold credentials. But it does give you a vocabulary for the trade-off: you are accepting a privacy risk in exchange for an availability benefit. Write that trade-off down. If a regulator or a partner asks why a non-employee had access to the records system, the answer should be a document, not a shrug.

For mobile money agents, the GSMA State of the Industry Report on Mobile Money is the standard reference for how the sector operates. It does not prescribe break-glass procedures, but it does document the scale of the agent network and the dependence on individual agents. If your branch is one of those agents, the provider’s own terms of service may already require you to have a named alternate. Read them before you write your own procedure.

The two-week test

Before you take the time off, run a test. Give the stand-in the handover doc and the envelope, then leave for a weekend. Do not answer your phone unless it is the second phone. When you return, ask three questions:

1. What did you have to guess?
2. What did you look for and not find?
3. What did you almost break?

Fix the answers. Then take the two weeks.

The test costs you a weekend. It is the only way to know whether the doc and the envelope work. A handover doc that has never been used is a guess. A break-glass envelope that has never been opened is a hope.

When this is wrong

This procedure assumes you can find one competent person who is willing to be the stand-in. If you cannot, the procedure does not work. The alternative is to reduce the blast radius: move what you can to a managed service, accept longer downtime for what you cannot, and tell your customers what to expect. That is a worse outcome, but it is an honest one.

It also assumes the stand-in is trustworthy. If they are not, the envelope is a liability. The mitigation is the signature check and the rotation, but those only tell you after the fact. If you cannot find someone you trust, do not use an envelope. Use a managed service with a support contract, even if it costs more.

Finally, this procedure assumes you have the time to write the doc and run the test. If you do not, you have a bigger problem than the vacation. The doc is the vacation. Without it, you are not taking time off. You are just working from a different location.

FAQ

How long should the handover doc be? Under ten pages. If it is longer, the stand-in will not read it. The five-things section is the part that matters.

Can I use a password manager instead of an envelope? Yes, if the stand-in has reliable internet and you have tested the emergency access feature. The failure mode is the internet, which is often the thing that is broken. A physical envelope does not need the internet.

What if the stand-in needs to call the upstream provider? Put the account number, the support number, and the name on the account in the handover doc. Do not put the portal password in the doc. Put it in the envelope.

How often should I rotate the credentials in the envelope? After every use, planned or not. Also rotate them if the envelope is lost, if the stand-in leaves, or if you have any reason to believe the seal was broken. An annual rotation is a reasonable baseline if none of those happen.

What if I cannot find a stand-in at all? Reduce the blast radius. Move what you can to a managed service. Accept longer downtime for the rest. Tell your customers what to expect. It is a worse outcome, but it is honest.