[topher200]

Interestingly, the Google SRE book[1] mentions scenarios where they practice exactly this:

> The solution to this Chubby scenario is interesting: SRE makes sure that global Chubby meets, but does not significantly exceed, its service level objective. In any given quarter, if a true failure has not dropped availability below the target, a controlled outage will be synthesized by intentionally taking down the system.

I doubt there are any customer-facing systems that practice this technique. Just super interesting that it exists.

[1]: https://sre.google/sre-book/service-level-objectives/#xref_r...