A double-entry posting engine that cannot silently go wrong
Seventy-four places in the system move money. If one of them lands on the wrong account there is no error and no alert — the books are just quietly wrong until a year-end that will not reconcile.
When the system cannot find an account, guessing corrupts the books invisibly and refusing stops a shop trading. I chose the third answer.
