Institutional Operating Architecture: The Missing Institutional Layer Between Governance and Risk

Contemporary institutions increasingly experience failures that neither governance nor risk management appears able to prevent. Boards are well constituted, statutes are clear, risk registers are maintained — and crises still recur with recognisable escalation patterns, described each time as unexpected. This paper argues that such failures reflect an architectural absence: a missing layer of institutional design governing how participation, learning, commitment and escalation operate across time. We name that layer the institutional operating architecture (IOA): the set of structural conditions determining how an institution functions between moments of governance decision-making and risk response. The IOA governs conditions rather than outcomes. It sits upstream of governance decisions and downstream of strategic intent, and is distinct from governance, management, risk and culture. Because this layer is unnamed and unowned, it is held informally — through custom, scale and shared norms — and it is failing under conditions of scale, speed, polarisation and degraded pluralism. The paper maps the layer, distinguishes it from neighbouring functions, identifies six characteristic failure modes, situates it alongside historical institutional innovations such as audit and compliance, and proposes recognition without the creation of new bureaucracy. The claim is deliberately non-radical: these functions already exist and already do critical work. What is missing is that anyone owns them.