Do you require explicit configuration for new services or rely on fallback defaults?

by

I was reading about a team that went three weeks without noticing errors because their new setup automatically defaulted to zero logging in production. The code itself had zero bugs, but relying on a default fallback meant nobody actually chose that behavior—it just happened quietly.


Since then, I’ve started viewing unset options and fallback defaults as a bit of a risk rather than a helpful shortcut.


How does your team handle default configs to make sure critical settings aren't skipped by accident?

7 views

Add a comment

Replies

Best

I ran into a version of this recently. A field was missing from some content, and the fallback silently produced an empty value instead of failing anywhere visible.

Nothing crashed, so nobody noticed until it showed up somewhere it mattered.

What fixed it for me: split "missing value" into two different outcomes depending on what it feeds. If it's cosmetic, a safe default is fine. If it flows into something that gets treated as fact downstream, like a timestamp or a record other logic depends on, the build should fail loudly instead of falling back.

Runtime never invents a value either way. It just refuses to pretend the gap doesn't exist.

The mistake I'd made before was assuming "no error" meant "no problem." A quiet fallback and a correct config look identical from the outside.

The only way I've found to catch that gap is making the missing case fail somewhere a human sees it, ideally before it ships, not three weeks into production.