100%
GRIMOIRE
GrimoireDindon CorpusSynthesis VolumesThe Foundation of Iron
FRENAR
← PreviousNext →
HUMAN
STRUCTURAL STUDY · OPÉRATION DINDON · JUNE 2026
◆◆◆
THE PAGER
AND THE BODY
What permanent on-call destroys in silence
◆ CONTEXT

This study extends "The Economy of Silence" (uptime as the sole SRE metric) and "The Departure of the Last One Who Knows" (mechanism 4 — burnout by accumulation). It addresses what permanent on-call does to the body and cognition over time — a reality documented by occupational medicine, ignored by the infrastructure industry. This document is not a complaint. It is a risk analysis applied to the human resource.

◆◆◆
Amine RAITI · Infrastructure Architect & SRE
Public document · CC BY-NC-SA 4.0 · AI Powered by Amine · Opération Dindon
HUMAN
1
SECTION 1 · WHAT ON-CALL DOES TO THE BODY
THE 3AM WAKE-UP AND ITS PHYSIOLOGICAL CONSEQUENCES

The pager sounds at 3am. The engineer wakes abruptly, cortisol spiking, heart rate at 100. They open their terminal, analyse alerts, make decisions on a production system. This scenario is normal in infrastructure. It is documented by occupational medicine as one of the most aggressive known disruptors of the circadian cycle — on a par with rotating night shifts, hospital duty, and shift work.

◆ NOCTURNAL COGNITIVE DEGRADATION — WHAT SCIENCE SAYS

Occupational medicine and neuroscience research converges: cognitive capacities between 2am and 6am are significantly reduced — extended reaction time, diminished complex reasoning, reduced working memory, tendency to fixate on incorrect solutions. An incident managed at 3am by an engineer woken abruptly is statistically more likely to produce a human error, a suboptimal decision, or an unnecessary escalation than an identical incident managed during the day.

◆ WHAT THE SECTOR REFUSES TO MEASURE

The infrastructure industry measures MTTR — Mean Time to Repair. It does not measure the correlation between incident trigger time and resolution quality. It does not measure the number of incidents that escalate because a 3am decision worsened the initial problem. It does not measure the cost of nocturnal human errors. This cost is real. It is simply invisible in operational performance dashboards.

◆ NASSIHA — THIS IS NOT A CRITIQUE OF ON-CALL

On-call is an operational necessity in critical production environments. This study does not call for its elimination. It calls for its recognition as an operational risk, and its management as such — with the same analysis and mitigation tools one would apply to any other infrastructure risk.

HUMAN
2
SECTION 2 · THE SILENT ACCUMULATION
BURNOUT IS NOT AN EVENT — IT IS AN ACCUMULATION

Burnout in infrastructure does not look like a sudden breaking point. It looks like a progressive, invisible erosion that neither the engineer nor their manager sees coming, because it occurs below the detection threshold of normal indicators. The engineer continues responding to alerts, managing incidents, delivering. They do so with increasingly reduced cognitive and emotional resources — but they do it, and this continued capacity masks the ongoing degradation.

◆ THE THREE DOCUMENTED STAGES

Stage 1 — Active compensation: the engineer compensates for fatigue through conscious effort. They are more careful, double-check, document better to offset the memory gaps they are starting to feel. This stage is invisible externally — they will overperform on indicators.

Stage 2 — Progressive disengagement: compensation becomes too costly. The engineer begins doing the bare minimum — not out of laziness, but to preserve remaining resources. Work quality degrades slightly. They begin avoiding complex tasks.

Stage 3 — Collapse: accumulation reaches a threshold. The engineer stops — sick leave, resignation, or the most dangerous scenario for the organisation — they stay but are no longer really there.

◆ ON-CALL AS AN AMPLIFIER

On-call is not the sole cause of burnout in infrastructure. But it is a powerful amplifier of all other causes — excessive workload, lack of recognition, loss of meaning, organisational conflicts. An already pressured engineer who accumulates on-call nights accelerates their progression to stage 3. On-call frequency is as reliable a burnout risk indicator as any workplace wellbeing questionnaire.

HUMAN
3
SECTION 3 · MISSING METRICS
WHAT THE SECTOR DOES NOT MEASURE

The infrastructure industry has developed sophisticated metrics to measure the health of its systems — SLA, MTTR, MTTD, error rate, latency. It has not developed equivalent metrics to measure the health of the engineers who maintain these systems. This asymmetry is revealing: the organisation knows how to measure what costs it directly (downtime, incidents) but not what will cost it tomorrow (team erosion).

◆ THE METRICS THAT SHOULD EXIST

— On-call frequency per engineer per month (number of nights and weekends)
— Number of nocturnal alerts received per engineer (not just incidents handled)
— Average recovery time after an on-call night (hours before returning to normal work)
— Rotation rate on on-call positions (high rate is an early burnout signal)
— Correlation between night-managed incidents and human errors documented in post-mortems

None of these metrics are standard in the sector. Some exist in the most mature organisations. The majority do not calculate them.

◆ THE LINK WITH "THE ECONOMY OF SILENCE"

"The Economy of Silence" documented that uptime is the only metric that counts in many infrastructure organisations — that anything not visible in the availability dashboard is invisible. Engineer erosion is the textbook case of this invisibility: it generates no alert in monitoring tools. It generates a resignation six months later, or a major incident whose true root cause nobody will understand.

◆ NASSIHA — METRICS ALONE ARE NOT ENOUGH

Measuring on-call frequency is necessary but not sufficient. An organisation that measures and changes nothing produces data without value. Measurement only makes sense when coupled with pre-defined action thresholds — beyond X on-call nights per month, rotation is mandatory; beyond Y nocturnal alerts per week, the alerting system is reviewed.

HUMAN
4
SECTION 4 · THE CULTURE THAT WORSENS IT
OPERATIONAL HEROISM AS A TOXIC NORM

The infrastructure sector has developed a culture of operational heroism — the implicit valorisation of the engineer who manages the 3am incident without complaining, who is always present, who "holds" whatever happens. This culture is understandable in its origin: critical systems require reliable people. It is toxic in its effects: it implicitly punishes those who set limits and rewards those who wear themselves out without saying so.

◆ HOW HEROISM MASKS STRUCTURAL PROBLEMS

A heroic engineer absorbing an excessive on-call load makes the problem invisible to their manager. The system runs. Incidents are resolved. Metrics are good. The underlying structure — too few engineers, overly sensitive alerting, fragile architecture — is never questioned because individual heroism compensates for its flaws. Until the engineer stops.

◆ THE BLAMELESS POST-MORTEM — AND ITS LIMITS

SRE culture introduced the blameless post-mortem — incident analysis without designating an individual culprit, seeking systemic causes. This is a real advance. But the blameless post-mortem addresses technical incidents. It does not address human incidents — burnout, the departure of an expert, the error of an exhausted engineer. These events are rarely treated with the same analytical rigour as server faults.

◆ WHAT MATURE SRE CULTURE DOES DIFFERENTLY

The most mature SRE organisations — certain teams at Google, Netflix, Stripe — have begun treating on-call load as an operational risk on a par with technical debt. They set maximum on-call thresholds per engineer, make rotation mandatory, measure nocturnal alert volume and reduce it as they would pay down technical debt. This is not goodwill — it is risk management.

HUMAN
5
SECTION 5 · THE LEVERS
TREATING ON-CALL AS AN OPERATIONAL RISK

The levers that follow are not wellbeing measures — they are operational risk management measures. The distinction matters: it shifts the conversation from goodwill to reliability. An exhausted engineer is an operational risk on a par with a server without redundancy.

◆ LEVER 1 — MAXIMUM ON-CALL THRESHOLD PER ENGINEER

Define and respect a maximum number of on-call nights per engineer per month. This threshold is not a preference — it is an operational limit, like a server's maximum load limit. If the team cannot respect this threshold, it is an understaffing signal that should trigger recruitment or a reduction of the on-call scope.

◆ LEVER 2 — REDUCE NOCTURNAL ALERT VOLUME

The majority of nocturnal alerts are either false positives or alerts for events that do not require immediate intervention. Reducing this volume is engineering work — revising alert thresholds, removing alerts that never trigger action, consolidating redundant alerts. This work is systematically deprioritised. It should be treated as technical debt to be actively paid down.

◆ LEVER 3 — REAL FINANCIAL AND TIME COMPENSATION

On-call has a real physical and cognitive cost. It must be financially compensated at a level that reflects this cost — not symbolically. It must also entitle the engineer to protected recovery time the following morning: an engineer woken at 3am cannot be in a meeting at 9am without performance degradation. This recovery is not a luxury — it is the recharging of a critical operational resource.

◆ LEVER 4 — ARCHITECTURE AS AN ON-CALL REDUCER

The best response to excessive on-call is not organisational — it is architectural. Self-healing systems, resilient architectures, well-designed automatic failovers reduce the number of incidents requiring nocturnal human intervention. Investing in architectural resilience is the most direct investment in the health of on-call teams.

HUMAN
6
SECTION 6 · THE PROPOSAL
RECOGNISING THE ENGINEER AS CRITICAL INFRASTRUCTURE

The central proposal of this study is simple: the on-call engineer is a component of the infrastructure as critical as the servers they maintain. They deserve the same level of monitoring, redundancy and preventive maintenance as those servers. A server without redundancy is an unacceptable risk. An on-call team without rotation is the same risk applied to the human resource.

◆ MEASURE 1 — PUBLISH ON-CALL METRICS IN SOCIAL REPORTS

Companies with more than 50 employees produce an annual social report. Integrating on-call metrics into it — average number of nights per engineer, nocturnal alert volume, rotation rate on on-call positions — makes visible what is structurally invisible. This transparency creates compliance pressure that the absence of measurement does not allow.

◆ MEASURE 2 — ADDRESS ON-CALL IN COLLECTIVE AGREEMENTS

The Syntec and digital sector collective agreements frame overtime, flat-rate day arrangements, and the right to disconnect. They do not specifically frame recurrent nocturnal on-call in critical production environments. A specific clause — maximum threshold, minimum compensation, guaranteed recovery time — in digital sector agreements is a measure within reach of social negotiation.

◆ MEASURE 3 — INTEGRATE ON-CALL LOAD INTO MANAGEMENT EVALUATION CRITERIA

A manager evaluated on system availability but not on their team's on-call load has an incentive to understaff teams and overload individuals. Adding on-call load as a management evaluation criterion — at the same level as technical indicators — changes the structural incentives of middle management.

◆◆◆

The pager does not sound in a vacuum. It sounds in a body. That body has limits. Ignoring them is an operational risk — not proof of resilience.

◆◆◆
NEMO SUPRA LEGEM EST
← PreviousNext →