Resilience · The failure points · Element
The impact
What would happen, and how quickly.
The part
What it is
Time to impact matters as much as size. A failure that stops supply in two days needs a different response from one that bites after eight weeks of buffer.
Recovery time is the other half, and it is usually longer than the buffer that covers it.
The smallest level
The attributes it carries
Each attribute is one of the framework’s shared types. What a date is, and how it is written, is defined once for the whole model — the note here says what it means in this particular place.