The other thing that I still worry about as a matter of principle
is one of Jon Postel's contributions to RFC 1958:
" 3.11 Circular dependencies must be avoided.
For example, routing must not depend on look-ups in the Domain
Name System (DNS), since the updating of DNS servers depends on
successful routing."
That's a little simplistic as written but it seems to need some
thought - can the mapping system recover from a major routing
failure without manual intervention? If the answer is "no" or
"dont't know" we have a problem.