Building software that survives contact with reality