Why Some Systems Keep Working When Things Go Wrong