> ... to allow an adequate window for recovery with no user impact.

Which made me think: it would be cool if companies were doing "pre-mortems". Like: "today we had a configuration problem, but because of our defense in depth, it slowed our systems by 7.8%". Or maybe Googlers already have something like that internally?