Service Resilience

The design of Ryouiki should incorporate consideration for preserving state and correcting failures.

Bit Flips

Critical information should be stored in a manner that protects against environmental bit flips.

Despite being rare, bit flips are unpredictable, difficult to prevent, and have the potential to introduce severe vulnerabilities in the service.

For example, a bit flip in a user's group list would have the potential to give the user administrative access to the domain or server.

While some hardware configurations address these issues, it should be assumed that the service will be run in the least protected environment—as it probably will be.