make capacity fault-proof