The Overloaded Ferry at Dawn
A river crossing runs a wooden ferry rated by its operator for 60 passengers, though the hull plate is corroded and the local boat-safety inspector has never certified the vessel. On a foggy morning, 78 people board, including 14 schoolchildren. The ferryman insists the rating is a formality and that the river is calmer than usual. A second, smaller boat owned by the same operator is available but would require two trips, delaying everyone by about 40 minutes. Most passengers are day labourers who lose a full day's wage if they arrive late. The ferryman argues that the fog will lift by mid-morning and that the crossing takes only 12 minutes. One passenger, a retired teacher, points out that the hull plate was patched last season. Write a judgement about what should happen before departure, weighing safety, livelihood, and the reliability of the operator's assurances.
1. Should the ferry depart as loaded? Justify your decision using the specific facts given, and identify the single most decisive factor.
Read the worked answer
The ferry should not depart as loaded. The decisive factor is the combination of an uncertified, corroded hull with 18 passengers above the operator's own stated rating - not the fog alone.
Reasoning:
- The rating is not a formality. The operator's own figure of 60 is the only numerical limit available, and exceeding it by 30% on a hull that was patched last season compounds risk. A patched plate on a wooden hull is a known weak point; loading more people increases freeboard loss and stress on that plate.
- The assurances are unreliable. The ferryman has an interest in departing. He cites calm water and lifting fog, but fog obscures hazards and reduces the ability of other craft to see the ferry. The '12-minute crossing' is an average, not a guarantee.
- Livelihood matters but is not decisive. Losing a day's wage is a real harm, but it is reversible; drowning is not. The 40-minute delay from a second trip is modest compared with the risk.
- Uncertified status shifts the burden. Since no inspector has certified the vessel, no independent party has verified that 60 is safe, let alone 78.
Therefore the correct judgement is to offload at least 18 passengers or split the crossing, and to refuse departure until the load is within the rating.
2. The operator proposes: 'We go now, but I will stand at the tiller myself and watch the water.' Evaluate whether this personal assurance resolves the problem.
Read the worked answer
It does not resolve the problem. Personal vigilance addresses one failure mode - the ferryman noticing a hazard - but the main risks here are structural and inertial.
- Structural risk is not solved by attention. A corroded, patched hull plate fails because of load and water pressure, not because nobody was watching. Standing at the tiller does not reduce the stress on that plate.
- Inertia and freeboard are physical. With 78 people, the vessel sits lower and responds more slowly. A tillerman cannot compensate for reduced freeboard if water comes over the side, nor for the longer stopping distance.
- The assurance is unverifiable and self-interested. The same person set an uncertified rating and is now asking passengers to trust his judgement over an independent inspector's absence. That is precisely the situation certification exists to prevent.
- It creates a false sense of security. Passengers may board believing a responsible person is in charge, when the underlying limit has already been breached.
A better assurance would be an independent inspection, a load count within rating, and a written procedure for splitting trips. Personal commitment is a supplement to, not a substitute for, structural safety.
3. If you had to design a rule to prevent this situation recurring, what would it contain and why?
Read the worked answer
A workable rule would combine a hard limit, independent verification, and a low-cost alternative so that compliance does not depend on the ferryman's goodwill.
- A posted, certified capacity determined by an inspector, not the operator. The plate should state the number and the date of inspection. Reason: the operator has a commercial incentive to inflate the figure.
- A physical counting mechanism - a turnstile, numbered tokens, or a manifest - so that the limit is enforced by design rather than by memory. Reason: the failure here was 18 extra people boarding unnoticed or unchallenged.
- A scheduled second trip with a fare-neutral delay. If splitting the crossing costs passengers wages, the rule will be evaded. Subsidising or scheduling the smaller boat removes the incentive to overload.
- A corrosion inspection interval with a clear withdrawal threshold for patched plates. Reason: the patched plate was the known weak point and no rule addressed it.
- A reporting channel for passengers, such as the retired teacher, to raise concerns without confrontation.
The principle is to make the safe choice the easy choice, because rules that rely on an interested party's self-restraint tend to fail exactly when they are most needed.