Design margin is the buffer between a system’s required performance and its actual capacity. Margin work adds slack: a timeout slightly longer than the expected maximum, a rate limit set below the theoretical ceiling, a queue depth larger than peak demand.

Margin does not change the nominal behavior of a system; it changes what happens at the edges — when conditions are worse than expected. A system with no margin is operating at its limits at all times; any variation causes failure.