Failures are instructive. When faults occur they are not melodramatic; error states are described in plain language, with guidance that is actionable and brief. Recovery procedures are designed to be forgiving: rollback points, safe modes, and a visible path back to functionality. The design assumes users want to fix things more often than they want to call for help, and so it gives them the instruments to do so.