You should consider this possible lesson: "Our simple model that fails gracefully did so and was simple to recover" Redundancies and failsafes are not free -

You should consider this possible lesson: "Our simple model that fails gracefully did so and was simple to recover" Redundancies and failsafes are not free - they add complexity. 99.9% availability fails in boring ways. 99.999% availability fails in fascinating ways.