“Resilience engineering tells us that we should routinely inject faults into the system, doing them frequently, to make them less painful.”