Fail closed
A design rule that when a system cannot be sure an action is allowed, it refuses rather than permits. ZopNight's gateway refuses requests until its permission table has loaded, and refuses a change when it cannot confirm the caller's permission. Why it matters: An outage then blocks actions instead of silently letting unauthorised changes through.
3 lesson references ← Back to glossary
Where it appears
Read the term in context.
Each row is a lesson that uses this term. The lesson where it first appears is the canonical definition.