What are the key considerations when designing systems that must remain operational for decades under extreme conditions?