All Analysis
The American Factory · Part 5 of 5

Some Lights Can't Go Out

The lights-out factory is the automation industry's endpoint. An insurance adjuster has some questions about that.

The previous four parts of this series built a case for the automated American factory — what triggers it, what it does to the workforce, what it looks like, and what commercial model sustains it. This part introduces a participant nobody in the automation conversation has thought to invite: the person who has to decide whether to insure it.

Her name is irrelevant. She has been underwriting commercial manufacturing facilities for twenty-two years. She has insured stamping plants, assembly lines, paint shops, and foundries. She has seen fires that started in a hydraulic line at 2am and ran for forty minutes before anyone noticed. She has seen tooling failures that produced a week of out-of-spec parts before the quality system caught them. She has seen power outages that took three days to recover from because the one person who knew the restart sequence was on vacation in Cancun.

She has a list of questions she asks every facility she underwrites. The questions haven't changed much in twenty years. The physics of manufacturing facilities haven't changed much in twenty years either.

The SVPs have come prepared. They have a slide deck. Cycle time improvements. Defect rate projections from the pilot facility. Uptime statistics. An AI vendor is in the room with his own slides. Everyone is very excited about what they've built.

She lets them finish. Then she opens her tablet.

Conference Room B · Tier 1 Automotive Supplier · 10:14 AM
Adjuster
"Who do I call at 3am when the line goes down?"

The SVP of Operations glances at the SVP of Technology. The SVP of Technology looks at the AI vendor. The AI vendor begins to explain about the remote monitoring center, which is staffed around the clock, which has direct API access to every sensor in the facility, which can dispatch a response team within —

Adjuster
"Not who do I call at the monitoring center. Who do I call who can physically be in this building within twenty minutes and make a decision."

There is a silence that the slide deck did not prepare anyone for.

SVP, Operations
"We have a regional maintenance contractor on retainer. Response time is typically forty-five minutes to an hour, depending on —"
Adjuster
"Forty-five minutes."

She writes something down. She does not look up.

Adjuster
"What happens when you lose power. Not a brief interruption. A full facility outage. The robots are down. The sensors are down. The monitoring system is running on backup, but the backup has a four-hour window. Who is there."
SVP, Technology
"The facility is designed with redundant power architecture. We have two independent feeds from the grid, plus an on-site generator that kicks in automatically within —"
Adjuster
"And when the redundant system fails."

The AI vendor begins to explain about the probability of simultaneous failure across redundant systems, which is statistically very low, which in twenty years of operation across comparable facilities —

Adjuster
"In twenty-two years I have never underwritten a facility where the redundant system did not eventually fail. That is not a statistical argument. That is experience. Who is there when it does."

The room is quiet. On the screen behind the SVP of Technology, a slide is still showing. It has a photograph of a robot arm. The robot arm is very clean and very orange and it is performing a task with extraordinary precision. Nobody is looking at it.

Adjuster
"I'm going to ask you about an incident. Six weeks ago. Your pilot facility in Lansing. A coolant line failed on line three at approximately 11pm. Your monitoring system flagged it at 11:08. The response team was dispatched. They arrived at 12:14. By that point the affected tooling had been running dry for sixty-six minutes. Walk me through what was produced in those sixty-six minutes and what happened to it."

The SVP of Operations opens his mouth. Closes it. Opens a folder on the table in front of him. The folder has a report in it. The report was prepared by an engineering team. The engineering team had access to the sensor logs and the production records and the AI's incident reconstruction.

SVP, Operations
"The system flagged 847 potentially non-conforming parts. Of those, 312 were quarantined by the automated inspection system before shipping. The remaining 535 were —"
Adjuster
"Were shipped."
SVP, Operations
"Were shipped before the quarantine flag propagated through the —"
Adjuster
"535 potentially non-conforming parts were shipped to your customer. I want to make sure I have that right."

He confirms that she has that right.

Adjuster
"Who signed off on the process that allowed that to happen."

Long pause.

SVP, Technology
"The process is automated. There isn't a —"
Adjuster
"There isn't a person."
SVP, Technology
"The system is designed to —"
Adjuster
"The system shipped 535 parts that may have been defective to your customer and there is no person who signed off on that decision. That's what you're telling me."

She writes something else down. The AI vendor is no longer looking at his slides.

Adjuster
"Last question. Those 535 parts. If one of them is currently installed in a vehicle on a public road, and that part fails, and someone is injured — who is the responsible party."

The SVP of Operations looks at his folder. The SVP of Technology looks at the ceiling. The AI vendor looks at his phone.

Adjuster
"Because from where I'm sitting, you've shipped a potentially defective safety component, there's no human who made that decision, your monitoring system failed to prevent it, and your response time in the event of a facility failure is forty-five minutes on a good day. And you'd like me to underwrite this building."

She closes her tablet.

Adjuster
"I'm going to need to bring this back to our actuarial team. I'll be in touch."

She is not going to be in touch. Everyone in the room understands this.

What the Adjuster Is Actually Asking

The scene above is composite — drawn from the kinds of conversations that happen when insurance professionals encounter facilities that have automated faster than their accountability structures can follow. The specifics are illustrative. The underlying questions are real, and they do not have good answers under a lights-out operating model.

Commercial property and casualty insurance for manufacturing facilities is priced on risk factors that have been refined over a century of industrial accidents. The actuarial models are not sentimental about labor. They do not require human workers because of politics or tradition. They require human presence because human presence is the intervention mechanism that converts tail-risk events — the ones that can total a facility or produce a mass recall — into manageable incidents.

The Adjuster's Checklist — What She's Actually Evaluating
01
Who is the responsible party when something goes wrong?
In a staffed facility: a named individual who made a documented decision. In a lights-out facility: a software log, a vendor SLA, and a legal argument about system design.
02
What is the detection-to-intervention time for a failure event?
In a staffed facility: seconds to minutes — a person smells the coolant, hears the bearing, notices the part coming off wrong. In a lights-out facility: sensor detection lag plus monitoring center response plus contractor travel time. Measured in hours.
03
What happens during a full power loss?
In a staffed facility: people are present to assess, secure, and begin managed shutdown. In a lights-out facility: everything stops, sensors go dark, and the facility sits unmonitored until power is restored or a contractor arrives.
04
Who can I hold accountable in a subrogation claim?
In a staffed facility: a chain of human decisions with names, dates, and signatures. In a lights-out facility: a software vendor, a system integrator, and a facilities management company, each of whom will point at the others.
05
What is the maximum loss scenario, and what prevents it?
In a staffed facility: human judgment interrupts the cascade before it becomes total. In a lights-out facility: the cascade runs until the automated system reaches its design limit or the building burns.

These are not exotic questions. They are the standard underwriting checklist for any commercial manufacturing facility. The lights-out factory fails every one of them — not because it is poorly engineered, but because it has removed the intervention mechanism that the checklist was designed around.

The Accountability Architecture Problem

Part 4 of this series documented the purchasing incentive problem — the way OEM commercial structures reward short-term cost minimization over long-term program health. The insurance problem is its mirror image. The lights-out factory looks cheaper in a spreadsheet because it has eliminated labor cost. It looks different in an underwriting model because it has eliminated accountability.

Accountability is not a soft concept in manufacturing. It is a legal and financial architecture. When a stamped component fails in a vehicle and causes an injury, the liability chain runs backward through the production record. Who approved the last tooling change? Who cleared the equipment for production after the maintenance window? Who signed the quality gate at the end of the shift? Each of those signatures is a node in the accountability graph that insurers, courts, and regulators use to assign responsibility and calculate exposure.

Remove the people and you remove the signatures. You do not remove the liability. You redistribute it — upward to the OEM, outward to the system vendors, and ultimately to the insurer who wrote the policy without fully understanding what they were covering. That redistribution is what the adjuster in the scene above is calculating when she writes things down. She is not writing notes. She is writing a declination.

The lights-out factory has not eliminated risk. It has eliminated the people who were managing it — and left the risk behind.

The OEM's Quarter-End Problem

Part 4 of this series argued that OEM purchasing culture optimizes for the current quarter at the expense of ten-year program economics. The lights-out factory is that same impulse applied to labor. Eliminate the headcount. Show the savings on this quarter's cost report. Hand the problem — the insurance gap, the accountability gap, the power-loss gap — to someone else's quarter.

The someone else is usually the Tier 1 supplier, who is now operating a facility that their insurer is pricing as a high-risk unmonitored structure, and passing that premium into their overhead rate, which goes into their piece price, which the OEM's purchasing team will then try to negotiate down in the next annual productivity conversation.

The cost did not go away. It moved. It moved into the insurance premium, into the contractor retainer, into the warranty reserve that gets funded when the 535 parts make it to the field. It moved into the legal costs of the subrogation dispute when the insurer who wrote the policy decides they were not adequately informed about the facility's operating model. It moved into the recall campaign that nobody budgeted for because the sensor system that was supposed to catch the drift condition was itself running on the power that went out.

The quarter-end report showed a labor cost reduction. None of those costs are on the quarter-end report. They are on future quarters' reports, under different line items, managed by different people, who will not connect them to the decision that was made three years earlier to turn the lights out.

The Minimum Viable Human

The argument here is not against automation. The previous four parts of this series have made the case for automation consistently and without apology. Automation is coming. The economics are inexorable. The question is not whether to automate. The question is what you cannot automate away — what human presence is load-bearing in the facility, not for sentimental reasons, but for structural ones.

The answer the insurance industry has been arriving at, quietly and without fanfare, is that the minimum viable human presence in an automated manufacturing facility is not zero. It is the number of people required to:

Detect and respond to anomalies before they become cascades. Not the monitoring center. Not the contractor. A person, in the building, who can see and smell and hear what the sensors cannot and who can make a judgment call in the thirty seconds between "something is wrong" and "the line is on fire."

Own the accountability chain. A named individual who is responsible for production quality on a given shift — whose signature is on the quality gate, whose decision it was to run or stop — and who can be found when the adjuster comes asking.

Restart the facility when the power comes back. Not a procedure in a manual. Not a remote access login. A person who knows this building, who knows this equipment, who has restarted this line before, and who can do it again at 4am in the dark when the generator has been running for six hours and the backup coolant pump is making a noise it wasn't making yesterday.

That is not a large workforce. It is not the assembly line of 1978. It is a skilled, senior, well-compensated team of people whose job is to keep an automated facility running — and whose presence is the difference between a building that an insurer will cover at a reasonable rate and a building that an insurer will decline or price into unprofitability.

What the Actuarial Model Actually Requires

Commercial insurers pricing automated manufacturing facilities are increasingly distinguishing between facilities with minimum viable human presence and those without. The premium differential is not marginal. A facility with 24/7 on-site skilled maintenance and quality personnel — even a small team — is a categorically different risk profile than a facility that relies entirely on remote monitoring and contractor response.

The labor cost that the lights-out model eliminates is, in part, being recovered through insurance premiums that reflect the actual risk distribution of an unmonitored building. The CFO who approved the headcount reduction and the CFO who approved the insurance budget are often different people who have never had this conversation.

The Series Conclusion

Five parts. The automation threshold that is reshaping supplier qualification. The workforce reality that nobody in the political conversation is telling the truth about. The blueprint for a factory worth building. The commercial model that sustains it across a decade. And now this: the risk architecture that makes all of it insurable, accountable, and survivable when the power goes out at 3am and the robots go dark and someone needs to be there.

The lights-out factory is a useful thought experiment. It clarifies what automation can do when you remove every constraint. What it cannot do is operate without accountability, be insured without intervention capacity, or restart itself when the systems it depends on fail.

The American factory of the next decade will be highly automated. It will look nothing like the factory of 1978. Its workforce will be smaller, more skilled, better compensated, and more directly connected to the technology they maintain than any assembly line worker in history. And it will have people in it — not because of politics, not because of sentiment, not because the robots aren't good enough yet. Because the building requires it. Because the insurance requires it. Because when the adjuster asks who do I call at 3am, there has to be an answer.

Some lights can't go out. The ones that illuminate the person who answers the phone at 3am are among them.

The American Factory — Complete Series