> How can one design systems to make it more likely that they will continue to work as designed?

Perhaps it would need to be antifragile in some way, and have direct immediate feedback on "bad repair" vs "good repair".