Definition
The system defaults to the safest possible behavior when uncertain, putting the ability to halt ahead of throughput. In Ethotechnic practice, fail-safe mode is not a generic error page: it is a predesigned degraded state with bounded actions, clear status signals, and immediate escalation paths.
A fail-safe posture should keep decisions open to challenge and reduce irreversible harm while operators diagnose the incident.
Hypothetical example
- A medication-order service blocks new high-risk orders during model drift and routes clinicians to manual review with visible restore timing.
References
- Governance taxonomy · Resource
- Worked examples · Essay