⚜ PRINCIPIA ORTHOGONA · Book XX · Ch 1 Book XX contents · Ch 2 →
Book XX · Reading Data · Chapter 1 · Inference · 2026-09-27
MATHEMATICS · APPLIEDHISTORY · SCIENCE

The Planes That Came Back

Survivorship: the sample that reached you is not the population. Read from Abraham Wald's 1943 memoranda rather than from the one-line story about them — and then turned on this corpus.
Primary sourceWald, A Method of Estimating Plane Vulnerability Based on Damage of Survivors, SRG 1943; CNA reprint CRC 432, 1980
Model textEvans & Rosenthal, Probability and Statistics, §5.1, p. 254
Every numberch01-verify.py — run first, 0 FAIL

The story everyone tells runs one sentence long: the bombers came back with holes in the wings, and Wald said to armour the engines, where the holes were not. The memoranda Wald actually wrote are a hundred pages of equations, the worked examples are marked hypothetical, and armour is mentioned once. The idea survives the retelling. The method does not, and the method is the part you can use.

§ 1

What the story leaves out

In 1943 Abraham Wald, working in the Statistical Research Group at Columbia, wrote a series of memoranda for the people deciding how to protect aircraft. The first, issued as SRG memo 85, became Part I of the collected text CITED. It opens not with a picture of a damaged wing but with definitions: let Pi be the probability that a plane is downed by i hits; let Ai be the number of planes that came back with exactly i hits; let N be the number that went out.

That third quantity is the whole idea. The data in the hangar — hits counted on returning aircraft — are a sample from the planes that survived. Wald never treats them as a sample from the planes that flew. Everything that follows is an argument about the gap between the two: the planes that did not come back left no holes to count, and the missing holes are information.

The move, in one line If a region of the plane is hit as often as any other but its holes are rare among the returners, the planes hit there are the ones that did not return.
§ 2

How Wald turns missing planes into a number

Suppose, as Wald does first, that every hit independently fails to down the plane with the same probability q. A plane that received i hits came back with probability qi. So the observed share of returners with i hits, ai = Ai/N, is the share that received i hits, shrunk by qi. Undo the shrinking and the shares must add up to the planes that were hit at all:

a1/q + a2/q2 + … + an/qn = 1 − a0

One equation, one unknown, and Wald proves it has exactly one root between zero and one CITED. His confidence-limit example (p. 71) gives N = 500 and returners with 0 to 5 hits of 400, 40, 25, 5, 3 and 2. The script solves the equation by bisection:

quantityvaluesource
root q0.850ch01-verify.py [2]; Wald prints .850
chance one hit downs the plane, 1 − q0.150[2]
planes that did not return25 of 500[2]

Twenty-five planes are gone and have nothing to say for themselves; the equation recovers what they would have said from the 475 that came back. MODEL — the answer is only as good as the assumption that hits are independent and alike, and Wald spends much of the text relaxing exactly that assumption.

§ 3

The engines, the fuselage, and the inversion

Part V asks the question the story is about: which part of the plane is most vulnerable? Wald's worked example (pp. 63–65) splits a plane of 130 sq ft into engines, fuselage, fuel system and the rest, and records 202 hits on the returners. If a hit lands on a part in proportion to its area γ(i), and the returners show a share of hits δ(i) on that part, then a part whose hits are under-represented among survivors must be one where hits bring planes down. The rule that reproduces every entry of his table is

q(i) = q · δ(i) / γ(i)    with  Σ γ(i) q(i) = q
partarea share γshare of holes δholes on returnersdowned by one hitWald's table
engines0.2690.193390.390.39
fuselage0.3460.386780.052.05
fuel system0.1540.153310.152.15
other parts0.2310.267540.015.02

Read the table the naive way — protect where the holes are — and you armour the fuselage: 78 of the 202 holes, the most of any part. Read it Wald's way and the fuselage is nearly the safest place to be hit (0.05). The engines are 26.9% of the area but only 19.3% of the holes; that shortfall is the missing planes, and it makes a hit on an engine almost eight times as likely to down the aircraft as a hit on the fuselage COMPUTED. The fuel system is the control: its share of holes matches its share of area, and its vulnerability comes out equal to the plane's average.

What the page does not say Wald labels this example hypothetical (p. 65), and the script confirms the word is there. These are not measurements of 1943 aircraft, and nothing on this page is a claim about where the armour actually went. The only mention of armour in the text layer is on p. 89, where the tables are offered as “guides for locating protective armor.” The famous sentence is a fair summary of the method; it is not a quotation.
§ 4

The same gap, in a hospital

Evans and Rosenthal open their chapter on inference (§5.1, p. 254) with the Stanford heart-transplant study: did patients who received a new heart live longer than those who did not? Their tables record, for each treated patient, the days waited for a heart and the days lived after it, so the treated group's survival is the sum of the two CITED.

That sum carries Wald's gap inside it. To be counted among the treated, a patient had to survive the wait. A candidate who died on day ten never received a heart and so is counted as a control. The treated group is, by construction, the patients who came back from the first part of the mission. Comparing its lifelengths with the controls' without accounting for this credits the transplant with the waiting-room survival that let patients in. This paragraph draws the parallel; the textbook's own treatment of the covariates is in its Chapter 10 and is not reproduced here. MODEL

§ 5

Turned on this corpus first

This volume promised to use its instruments on the series before using them on anyone else. The series has a hangar too: the site. What a reader sees is the pages that are still there.

count, from gitvalue
HTML paths tracked today855
HTML paths ever added877
added, and no longer tracked66

Sixty-six pages were published at some path and are gone from it COMPUTED. Some were renames, some duplicates, and some were retractions — the withdrawn g6_equals_schumann is the case Chapter 2 audits. The script counts paths, not reasons, and does not sort them. What it establishes is the Wald point for a body of work: a reader who judges this series by its surviving pages is looking at the returners. The claims that failed badly enough to be removed have left no holes to count, unless something outside the site — docs/audit-log.md, the git history, docs/ml-evidence/ — keeps them.

That is why those records exist, and it is the practical conclusion of the chapter. A body of work that wants to be read correctly keeps its downed planes on file.

Elsewhere in the series The survivorship argument was used before this chapter, without Wald's name on it. WP-64 §2.4 reads “nature seeks self-regulation” as “teleology read backwards off a survivorship artifact,” and WP-66 and WP-68 turn it on their own claims. Book X, ch. 5 asks the same question of Ramanujan's notebooks: what survived the transmission, and what did not. Wald himself appears once, in Book VII's Dantzig chapter, where he independently reached one of Dantzig's results in the paper Neyman pointed to. This chapter is the first to read the 1943 memoranda themselves.
§ 6

What to carry out of this chapter

  1. Ask where the sample came from. Anything you can count was allowed to reach you by some process. Name the process before reading the counts.
  2. A shortfall is a signal. Where the survivors are thin compared with what exposure predicts, the missing ones went somewhere. Wald's engines are 27% of the target and 19% of the holes.
  3. Keep a control. The fuel system, whose holes match its area, is what tells you the method is not simply inventing vulnerability.
  4. Retellings are survivors too. The version of Wald everyone knows is the sentence that survived being repeated. The equations did not survive, and they were the method.

References

  1. A. Wald, A Method of Estimating Plane Vulnerability Based on Damage of Survivors, Statistical Research Group, Columbia University, 1943; reprinted Center for Naval Analyses, CRC 432, 1980. Part I first issued as SRG memo 85. Pages cited: 1–2 (definitions), 63–65 (Part V example), 71 (confidence-limit example), 89 (armour).
  2. M. J. Evans and J. S. Rosenthal, Probability and Statistics: The Science of Uncertainty, §5.1, Example 5.1.1, p. 254, citing Turnbull, Brown and Hu, JASA 69 (1974) 74–80.
  3. J. Ellenberg, How Not to Be Wrong (2014), which organises this ground; used for structure only, nothing cited to it.