fail closed

When something isn't handled, default to the safe, restrictive path rather than guessing.

A component that fails closed refuses or safely bails out when it meets input it doesn't understand, instead of proceeding and risking a wrong result. It is the cautious default. In microZeus, the IR builder 'fails closed': faced with unsupported input, it takes the safe path rather than producing something incorrect.