There's a difference between: - the system compensating for the network being fallible - the system not fulfilling its design goals - the system not being sp

There's a difference between: - the system compensating for the network being fallible - the system not fulfilling its design goals - the system not being specified well enough to test if the design goals were fulfilled