A design where the system continues when a check fails. Sometimes acceptable for low-stakes actions; dangerous for regulated or write-capable workflows.