Design for failure