a: process should survive at all costs

[as]

• Program should avoid crashing because this results in the loss of work

Mitigations:

• Trap all sources of panic
• If UI explodes, revert to text mode
• If text mode explodes, save all files to disk
• If disk explodes, attempt to write a dump to contiguous memory. This will make it easy to recover if a memory dump is captured
• Accept multiple sinks to for the operation