Every interface between critical services should assume failure will occur and handle it as reasonably as possible.

we are in the process of reviewing the interface contracts between every critical product and service that comprise our network to ensure that we a) assume failure will occur between each interface and b) handle that failure in the absolute most reasonable way possible.