Fail fast, fail often. Yeah, but the first failure blew up the satellite. Well, this is just a photo-sharing app..not rocket science. Okay, but your photos are accessed by users who have passwords that they probably use for other things..and aren’t some photos as important as satellites?
Several problems arise when the harm of software failure cannot be treated as an unbound variable. Here are some thoughts on two. I’ll write more on two more (one cognitive, one computational) later.