Halt

"Everyone designs for the robot working," he said, tapping his clipboard. "Almost nobody designs for it breaking. But everything breaks eventually — a motor jams, a wire loosens, a sensor goes dark, the battery sags. Reliability engineering doesn't pretend that won't happen. It asks, for each failure: what does the robot do the moment it does?"

He pointed at the arm. "Say the motor jams while holding this block. A naive robot keeps commanding full torque — grinding, overheating, maybe dropping the block, maybe catching fire. A fail-safe robot detects the fault and moves to a safe state — sets the block down, freezes, powers the motors down harmless. That's the whole discipline: fault detection, then a defined safe response."

He showed the builders three mechanisms. "First, detection: the robot has to know it's broken. So the motor watches its own current — a stalled motor pulls a huge spike, which is the signature of a jam. The sensor loop checks whether readings still make sense. Second, a watchdog timer: a little clock the main program must 'pet' every cycle. If the program hangs and stops petting it, the watchdog fires on its own and forces the robot into safe-state — because a frozen brain can't rescue itself. Third, graceful degradation: when one part fails, the robot doesn't collapse — it drops to a reduced-but-safe mode. Lose a sensor? Slow down, don't guess. Lose half your power? Return home, don't start new work."

He curled a protective paw. "And the golden rule under all of it: fail toward safe. When anything is wrong — stop, slow, park, or power down gently — never grind, force, race, or guess. Add a clear 'I have a problem' signal, a light or a beep, so a human can help; a robot that hides its fault and struggles on is far more dangerous than one that stops and asks."

A student frowned. "Isn't planning for failure kind of giving up before you start?"

"The opposite," said Halt. "Because your robot always fails safely, you're free to try the bold, fast, risky things. You can send it on any wild mission with an easy heart, knowing that if it breaks, it breaks gently. Fail-safe design doesn't make you timid. It makes you brave."