@thomasforth Has to depend on consequence of failure and what an acceptable threshold for that is, I would think
