Architecting Fail-Safe Supply Networks