Designing for Failure