The operating model
A life engineered to survive ruin and gain from disorder — so what you value compounds through every shock instead of breaking under it.
Six stocks · two flows · one objective — health · wealth · relationships · capability · meaning · autonomy
Unbreakable is not the same as untouched. A robust thing resists a shock and stays the same. An unbreakable thing is built so volatility leaves it stronger — up to a point.
Every action gets one test: what is the shape of its payoff when volatility hits? Not “is this good for me,” but “is the downside bounded and the upside open?” That asymmetry — capped loss, uncapped gain, or a stressor that triggers overcompensation — is antifragile.
Wind kills a candle. Wind feeds a fire. The wind did not change — the structure did. The whole project is about being structured like the fire across every part of a life.
Stocks are reservoirs you build; they can be fragile or unbreakable. Flows are non-storable budgets you spend to build the stocks — constraints, not domains.
Stocks — six domains
Built over time · audited continuously
Flows — two budgets
Spent, not stored · constraints on the whole system
Every candidate action runs this sequence top to bottom. Jump to seeding opportunities before checking for ruin and you have an opportunity generator, not an antifragility engine.
Any action with a real chance of an absorbing barrier — bankruptcy, irreversible injury, an unrecoverable break — is killed regardless of upside. Survival is the precondition for everything else.
We know what harms more reliably than what helps. The highest-confidence interventions are subtractions: cut the fragilizer, the drain, the dependency, the toxic tie, the recurring time-lien.
The safe end of the barbell. Liquidity and runway, recovery capacity, and — critically — slack in the calendar. A schedule run near 100% utilisation is fragile by the same math that topples a server at full load: any shock cascades because nothing can absorb it.
Small convex bets — bounded cost, open upside. Price each one by its time price: the one-off cost (cheap is good) and the time lien, the recurring future hours it locks up (low is critical). Favour bets that keep your time liquid and reversible.
Bounded hormesis, never chronic load. Strength training, fasting, cold, hard problems, processed conflict — stressors that trigger overcompensation, each paired with real recovery. The gain is conditional on integration, not automatic.
What to flag, what to move toward, and how you would know — across the six stocks.
FragileSleep debt, sedentary baseline punctuated by max effort, chronic low-grade stress, one untreated condition
MoveStrength + zone 2 + occasional intensity, time-restricted eating, heat/cold, varied load with real recovery
Leading: HRV, resting HR, VO₂max proxy, sleep consistency
Lagging: Time to recover from illness/injury; return at or above baseline
FragileDebt, income concentration, illiquidity timed wrong, the medium-risk middle
MoveBarbell: large safe liquid base + small uncapped bets; multiple income sources; skin in the game
Leading: Runway in months, income concentration, liquid-to-debt ratio, count of live options
Lagging: Net position after the last real shock vs before it
FragileBonds held together by avoiding all friction, total dependence on one tie, toxic drains
MoveTies that metabolise conflict; strong-tie core plus wide weak-tie layer
Leading: Cadence of costly-signal contact with core; breadth of weak ties; redundancy of support
Lagging: Recovery time after serious conflict; did the bond deepen or fracture
FragileSkills tied to one tool/employer, no exposure to novelty or error, knowledge that does not transfer
MoveDeliberate practice at the edge, learning from failure, transferable and Lindy-durable skills
Leading: Range of domains practised; rate of new skill acquisition; reps at the edge of ability
Lagging: Did a disruption (job, tech shift) leave you more employable or less
FragileMeaning sourced entirely from one job / person / identity; unprocessed adversity
MoveDiversified sources — work, relationships, mastery, contribution; integrate bounded adversity
Leading: Source count & diversity; felt progress on intrinsically valuable work
Lagging: After a real shock, did meaning collapse, hold, or regrow
FragileChokepoint dependency; single gatekeeper for essentials; no exit option
MoveReduce chokepoints; preserve freedom of action; redundant access rails
Leading: Redundancy of access rails; optionality of exit; count of single points of failure
Lagging: Can you act when a system fails you
Antifragility is not a scalar you can read off a dashboard. There are only two honest proxies — and one of them only arrives when reality tests you.
Leading — are you structured right
Runway, HRV, income concentration, calendar slack, redundancy, option count, meaning-source diversity. Continuously checkable. Tells you whether you are built unbreakable — but proves nothing on its own.
Lagging — did it actually hold
The only real proof appears when an actual shock hits: did you recover faster and end stronger, or degrade? Core captures these volatility events when they land.
The Goodhart trap
If you optimise the proxy, you fragilise yourself. Optimise HRV by avoiding all stress and you become a hothouse flower. The system measures response to volatility, never steady-state comfort — and must never become a single point of failure for your own judgment.
The terminal objective
Being unbreakable is instrumental, never the point. The point is that what you love survives every shock — and flourishes.
If we made antifragility itself the goal, we would commit the Goodhart error at the scale of an entire life. Flourishing sits above the whole machine as the why it all serves.
Survive the shock. Gain from the disorder. Compound what matters.