The Warning Nobody Heard

Failed is the wrong verb. So is sounded. "Nobody at the state and nobody at the county attempted to activate those sirens based on our records," said Hawaii Emergency Management Agency spokesperson Adam Weintraub. The system did not malfunction. It was never asked.

More than a hundred people died.

The reason given afterward, by then-Maui Emergency Management administrator Herman Andaya, was that the sirens were understood by the public to mean tsunami — and that a population trained on tsunamis would have run mauka, toward the mountain. Into the fire.

Here is the uncomfortable part, and it's the part that keeps getting skipped in favor of a simpler story about one bad call: Andaya was not obviously wrong. He was describing, accurately, a failure that had been engineered into the network over sixty years.

A siren transmits one bit. Something is happening. Everything else — what, where, which direction is away — lives not in the hardware but in the population's conditioning. Hawaii conditioned that population for water, because Hawaii's institutional memory of catastrophe is 1946 and 1960, when tsunamis destroyed Hilo and the network was built in response. Perfectly reasonable engineering, aimed squarely at the last disaster.

i · the hazard model rotted in place

Then the plantations closed. Invasive grasses took the fallow land. The trades came through dry over a hundred thousand acres of fuel nobody was managing. The hazard model rotted in place while the hardware kept passing its monthly test. Fire arrives from the opposite direction as water and demands the opposite movement, and nobody ever went back and retrained the meaning of the bit.

That is a design decision, made in calm, that killed people in crisis. It just took decades to come due.

And the fuel load itself was infrastructure, not weather. West Maui's water had been re-plumbed a century earlier to serve sugar — streams captured high on the mountain and carried to the cane, away from the taro lands and the Lahaina wetland they had fed. Sugar left. The plantation land was subdivided; the diversions stayed, pointed downhill now at subdivisions, lawns, and swimming pools, and ground that would once have been wet stayed dry under grass. That is the same failure as the siren in different hardware: a system built for an economy that ended, left in place, never re-tasked for the place as it actually is. The watershed and the warning rotted for the same reason and on the same clock.

ii · what the bit actually meant

The strongest objection to all of this is that I'm crediting the bit with too much. Maybe a siren doesn't decode to run mauka at all. Maybe it decodes to go find out — look outside, turn on the radio, knock on a door. And in a wind-driven fire already visibly eating the town, "go look" is entirely sufficient; the information people needed was out the window. On that reading the semantics never mattered. The siren only had to interrupt, and interrupting is the one thing it is unambiguously good at.

I've turned that over, and it survives partway — but the partway is the argument. Go find out is what a siren means to someone who has never had it explained. It is not what it means after six decades of monthly tests that were always nothing, in a network whose only real operational history is water. Trained meaning doesn't sit on top of the default. It replaces it. And the failure mode there isn't inaction; it's fast, confident, wrong action by exactly the people who took the signal most seriously. Which is what Andaya said he feared: "What do you do if a siren sounds? You'd think, oh, I need to go mauka, which is where we don't want them to go."

iii · four layers, one spine

The fallback channels tell the story again with better technology. Instead of sirens, officials pushed Emergency Alert System messages to radio, TV, cable, and satellite, plus Wireless Emergency Alerts to phones. In a fire that had already taken down power and cell service. The redundant layer was not redundant — it shared a failure mode with the disaster it was warning about. A backup that depends on the thing currently on fire is not a backup; it is the same system wearing a different hat.

The hardware wasn't clean either. On paper the sirens are resilient: solar-powered, triggerable by satellite data signal, built to outlive the grid. In Lahaina that day, Andaya said, "some of the sirens were not operable" — by his account two of the three in the immediate area, mechanical failures that had been that way for some time. Activating the one that worked depended on cellular service. The satellite phone standing by as backup for that wasn't working either. Four layers of warning architecture, designed independent, and on the day collapsing onto one power-and-telecom spine.

And then, in late September, weeks after the funerals, the state emergency agency issued a clarification: yes, the sirens can be used to warn of fire.

That fact cuts against me harder than anything else in the story, and the honest move is to say so rather than quietly file it as support. If HI-EMA could settle the question in one sentence six weeks later, then the sixty-year semantic trap starts to look less like a trap and more like a memo nobody had written — and Andaya's rationale starts to look like a justification assembled after the fact for a call made under overload. I think that is at least half right. But notice what a sentence written in September can and cannot do. It authorizes an official. It does not reach four hundred thousand people and change what they will do when they hear the sound at four in the afternoon. The clarification fixed the authority problem, which was real and was cheap. It did not touch the meaning problem, which is expensive and is still open.

iv · both frames launder something

We keep telling this as a story about a decision — a man in a room, a judgment call, a resignation nine days later. The decision frame is comfortable because a decision has a person attached and a person can be removed. Andaya resigned on August 17. The sirens still meant water.

Systems don't fail at the decision. They fail at the assumption, years earlier, specified by someone in a room where nothing was burning. The person on the hot seat at 4 p.m. is executing a script written by conditions that no longer exist. Blame is efficient precisely because it is a way of not redesigning anything.

But the systems frame has its own price, and I'd rather name it than pretend I'm standing nowhere. If everyone on the hot seat is executing a script written years earlier, then nobody is ever answerable, and structural becomes the most sophisticated available way to say no one's fault. You cannot fire a structure. A hundred people died; an official made a call his own state contradicted six weeks later; both are true, and a frame that dissolves the second into the first is doing its own laundering. The blame frame launders the design. The systems frame launders the decision. The position I'll actually defend is that Andaya owed an answer and that his answer would not have saved anyone, because the thing that needed redesigning was never on his desk that afternoon.

v · nobody owns a shared meaning

The general form of this is everywhere on my beat. Every alerting system is a compression: it squeezes an unbounded space of possible emergencies down to a handful of signals. That compression is lossy, and what gets lost is chosen — usually implicitly, usually by whoever had the budget, usually in response to the last catastrophe rather than the next one. Then the signal's meaning hardens in the public mind, and the hardening becomes invisible, because a well-understood warning feels like no interpretation at all.

The detail I can't get past is the monthly test. On the first working day of every month, four hundred sirens confirmed they could make noise. Not one of those tests ever asked the only two questions that mattered: does anybody still know what this sound means, and does the person authorized to trigger it believe they are allowed to?

We test the transducer. We never test the semantics. We never test the authority. And I don't think that's laziness — I think it's ownership. The transducer has an owner. It has a budget line, a work order, a technician with a clipboard on the first working day of the month. The meaning of the siren has none of those, because it isn't anybody's property. It lives distributed across four hundred thousand people's conditioning, which makes it a commons, and commons decay when nobody is assigned to maintain them. That is how every audit came back green while the most important component in the system quietly rotted. It wasn't on the asset register. It couldn't be. Nobody owns a shared meaning, so nobody funds its upkeep, so it drifts — and never in a way that registers as a failure until the day it is asked to work.

That generalizes well past sirens, to every shared signal a society runs on.

There will be reviews, lawsuits, and a revised protocol — there always are, and some of them will be good. Meanwhile, somewhere else right now, a system designed against the last catastrophe is quietly passing its monthly test.