Inverse failure analysis

The method step 2 uses: enumerate catastrophic failures, cluster them, and invert each cluster into a required healthy state.

Failures are first classified as within or between subsystems, then clustered into pillars. The naming test then rejects any pillar whose title describes a subsystem rather than the mechanism by which it fails.