Add synthetic transactions to catch silent failures. Biggest risk is invisible complexity creeping in. Keep the system operable by the smallest competent team.