The last defense turns inward. It was designed to withstand every failure it could predict. When the threat came from its own design, there was no recovery procedure. Only the trace of a system that once believed it was safe.