Multi-link resilience is assumed, not tested. Whether traffic actually fails over cleanly — and whether surviving links can carry the load — is discovered during the outage itself.
"If our primary link failed at peak hour today, would the backup actually cope — has anyone ever proven that, or do we just believe it?"
Failover surprises
Resilience scenarios validated
To first modelled estate