Impact tolerance vs. recovery capability — the gaps register — ITOL

Illustrative worked example: where stated tolerance and modeled recovery disagree, worst first — the honest list a program is judged by.