I design for moments when people, devices, and processes can't be trusted to behave — so the systems do.