Recovery and resilience

Assume it will fail anyway, and build the road back before you need it: a queue where odd cases wait for a human, a time limit, an undo, a backup way of doing the job by hand, and one practice run of that backup while nothing is broken.

Assume it will fail anyway, and build the road back before you need it: a queue where odd cases wait for a human, a time limit, an undo, a backup way of doing the job by hand, and one practice run of that backup while nothing is broken.

Example

For the calendar: anything it flags as ambiguous parks in a review folder instead of sending; unsent messages expire after 12 hours; a printed weekly schedule hangs on the fridge; and one Sunday a month you run the week off the paper copy alone to prove it still works.