Have a predetermined failure state that triggers a stop and re-evaluation for every decision to keep a bad call contained.