Degraded-Mode Design: Operating When Systems Fail
Operational systems fail. Communications links drop. Sensors degrade. Weather changes unexpectedly. Power supplies are interrupted. The question is not whether these failures will occur, but how the system behaves when they do. Degraded-mode design addresses this question by defining explicit … Continued