I’ve never heard of an untested failover mechanism that worked. Most places are afraid to invoke such a thing, even during a major outage.
Being afraid of failures is a massive sign of problems. I’ve worked in those sorts of places before.
