Failure mode assumptions and assumption coverage