I prefer the word robust. Where most if not all reachable failure states are not total disaster. The other word is reasonable: failure states are possible to r

I prefer the word robust. Where most if not all reachable failure states are not total disaster. The other word is reasonable: failure states are possible to reason about immediately, correctly and fully.