Canonical reference · Rev3 · Issued 5 September 2026

Silent Expiry

Silent Expiry — the quiet death of a control that stays documented, accepted and signed after the conditions it was built on have gone. Nothing fails. Nothing alarms. The paperwork remains correct — and the protection is no longer there.

What is Silent Expiry? §

Every control was built for a reason — a state of the world that made it the right control. A sample size rests on a supplier’s defect rate. A calibration interval rests on a duty cycle. A qualification rests on a person still holding a post. These conditions are the control’s premises: statements that were true on the day the control was written, and that nothing in the system watches afterward.

Why does it matter? §

When a premise quietly stops being true, the control does not break. It keeps running. The records stay complete, the audits keep passing, and the protection is gone — often for years, discovered only when the incident finally arrives and the investigation finds a control that was “implemented and effective” all along.

How is it different? §

This is not poor execution: the control is followed faithfully. It is not negligence: the control was right when it was built. It is not nonconformance: practice matches the document exactly. It is a third kind of gap — between a correct record and a world that moved — and no standard instrument owns it. An audit compares practice to record; it cannot compare either one to a condition that was never written down.

The full boundary — what Silent Expiry is not, and how it relates to root cause analysis, audit, FMEA, risk management, ISO 9001’s own clauses, latent conditions and drift — is stated in the Canonical Definition, Section 4 and Section 2.

Where can I learn more? §

Three questions expose it. Date — can you say when the premise would have stopped being true? Witness — who, outside the control’s owner, would actually know? Counterfactual — if it were false today, would anything alarm, or would the control just keep running?

This site is the knowledge hub for Silent Expiry: the permanent reference where the concept is defined, taught, evidenced, practised and — where it is useful to have the tools — handed over. It has six branches. Everything else on the site supports one of them.

Supporting the six: Examples — eight controls across domains, each run through the three-condition check · References — what the concept descends from, and is distinguished from · Resources — the definition to download, the one-page test card, citation formats · Revision history — what changed between revisions, and why · About — how this is maintained, and how to send a correction.

Discover the complete investigation §

The canonical definition states what Silent Expiry is. The Norwood Files shows how it forms inside a complete industrial investigation: four years in one plant, through manufacturing failures, quality decisions, supplier changes, engineering reviews and the organizational blind spots that keep all of it looking compliant. The concept is revealed the way it is encountered in practice — late, and from the records.

Read The Norwood Files on Amazon

Kindle edition · more about the book · four companion workbooks, free. The definition itself stays free to read and free to cite.