Designing for failure