worst-case design