Definition
The system defaults to permissiveness under failure — sometimes necessary for continuity, sometimes dangerous. A fail-open mode should be limited in time and come with friction that slows fast automated steps, monitoring, and rapid escalation.
Ethotechnic fail-open design requires explicit thresholds for returning to fail-safe mode when risk rises.
Tests that show it is in place
- Fail-open modes have explicit thresholds where they automatically switch to fail-safe or escalate to human review.
Hypothetical example
- A payments API temporarily accepts transactions during dependency outages but caps transfer size and triggers mandatory post-reconciliation review.
References
- Governance taxonomy · Resource
- Diagnostics · Resource