Read on Twitter
Our critical systems, fault analysis and game days often come down to what we think we know about call flow, the call depth itself, and what& #39;s at the call leaves, such as data storage, but less often what actually can take us out.
Which configuration changes can total a system, and which configuration interactions.
Which codebase paths when exercised with unexpected input will crater.
Which error handlers don& #39;t do what we think they do
What givens are on the path (the ones you don& #39;t draw because, details, vendors) and what happens when they fail.
What are the things that should they fail, can& #39;t be rolled back and have a time to recovery problem.
Who are the people that can fix those somethings when they arise.
What are your unanticipated failure modes?
