Design for Failure