How to Build AI Systems That Work When the Model Doesn't