Mental modelFailure modes and graceful degradation
A failure mode is one specific way a function can stop doing what it is supposed to do, and graceful degradation is designing so that when a failure mode occurs, the system loses capability in a controlled way rather than becoming dangerous all at once.
