vendor stack fragility doctrine