Amol Walunj

Here s a failure mode I don t see discussed much.

Imagine an operations agent notices that every morning, 30 orders arrive with incomplete shipping information.

So it:

Imagine an infrastructure agent detects a failing service.

It decides to restart instance A.

I have been thinking about a failure mode that permissions alone don t really solve.

An agent might correctly decide:

Refund this customer $25.