Playbooks
What do I do, and what does each option cost?
- 1
Review a design for runaway failure
Seven questions for a design review that find the failures a system causes itself: feedback loops, degraded-mode amplification, shared dependencies, blind health checks, head-of-line blocking, deferred work and unpriced recovery.
Diagnose - 2
Recover from a stuck overload
The trigger is gone but the system stays down: why shedding a little load and restarting both fail, how much load must really go, and the five-step procedure that gets out.
Design