Room for Error as a Design Principle