Definition
The system defaults to the safest possible behavior when uncertain, prioritizing stoppability over throughput. In Ethotechnic practice, fail-safe mode is not a generic error page: it is a predesigned degraded state with bounded actions, clear status signals, and immediate escalation paths.
A fail-safe posture should preserve contestability and reduce irreversible harm while operators diagnose the incident.
Adjacent terms
Example corpus
- A medication-order service blocks new high-risk orders during model drift and routes clinicians to manual review with visible restore timing.
References
- Governance taxonomy · Resource
- Worked examples · Essay