Dane Knecht's mental models

Their wordsThe past two incidents have demonstrated that we need to treat any change that is applied to how we serve traffic in our network with the same level of tested caution that we apply to changes to the software itself.

Their wordsInstead of panicking, there should have been a sane set of validated defaults which would have allowed traffic to pass through our network

Their wordswe are in the process of reviewing the interface contracts between every critical product and service that comprise our network to ensure that we a) assume failure will occur between each interface and b) handle that failure in the absolute most reasonable way possible.

Their wordsThese projects will deliver iterative improvements as they proceed, rather than one “big bang” change at their conclusion.