the best defense against major unexpected failures is to fail often. By frequently causing failures, we force our services to be built in a way that is more resilient.