"Columbia" was destroyed because of damaged thermal protection from foam debris that broke off from the external tank during ascent. The foam had not been designed or expected to break off, but had been observed in the past to do so without incident. The original shuttle operational specification said the orbiter thermal protection tiles were not designed to withstand any debris hits at all. Over time NASA managers gradually accepted more tile damage, similar to how O-ring damage was accepted. The Columbia Accident Investigation Board called this tendency the "normalization of deviance" – a gradual acceptance of events outside the design tolerances of the craft simply because they had not been catastrophic to date.