@danluu Hey just fun fact: at Google we recently had a truly amazing moment where non-ECC ram holding part of a protocol buffer got corrupted after transmission and validation, got replicated all over the place, and caused chaos.
I do not know how we defense in depth much harder but we'll have to figure out a way because I have officially lives to see a cosmic ray infiltrate and destroy a distributed system that aggressively validates input off wire on all nodes.