Resilience as an architectural control