Controlled failure injection: hypothesis design, blast radius control, safety mechanisms, game day planning, and resilience verification.